highCyber Attacks
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE Backdoor
A China-linked threat actor tracked as UTA0560 has been attributed to a spear-phishing campaign that exploits recently patched vulnerabilities in Google Chrome and Microsoft Windows to deliver a JavaScript backdoor named GRIMWEDGE. The campaign targeted multiple non-governmental organizations (NGOs) on September 1, 2026, according to Volexity. Organizations are advised to apply the latest patches immediately.
The Hacker News1 min read