importantSYS.SOURCE: The Hacker News• 2026-09-23T13:59:24+05:30

Chinese Threat Actors Exploit Chrome-Windows Zero-Day Chain for CLEANGULP Malware Deployment

#zero-day #malware #phishing #vulnerability

Chinese threat actor UTA0565 exploited a Chrome-Windows zero-day chain (CVE-2026-85046, CVE-2026-87491, CVE-2026-85880) through phishing campaigns to deploy CLEANGULP malware, which uses a spoofed domain to mimic legitimate media outlets for command-and-control communications.

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites.

The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break

Read original article

*** END OF TRANSMISSION ***

> NETHERLANDS FACES POTENTIAL US SANCTIONS OVER ICC INVESTIGATIONS > STRATEGIC IMPLICATIONS OF ABANDONING SCIENTIFIC LINUX IN HIGH-PERFORMANCE COMPUTING ENVIRONMENTS > F5 ADDRESSES CRITICAL ZERO-DAY VULNERABILITY IN BIG-IP APM ALLOWING UNAUTHENTICATED RCE ON OAUTH SERVERS > CHINESE THREAT ACTORS EXPLOIT CHROME-WINDOWS ZERO-DAY CHAIN FOR CLEANGULP MALWARE DEPLOYMENT > IMPLEMENTING JEV CLASSIFICATION MODEL IN PYTHON > CRITICAL NEXT.JS IMAGERESPONSE VULNERABILITY ENABLES SERVER CODE EXECUTION THROUGH MALICIOUS SVG INPUT > THE 1893 WORLD'S FAIR'S LASTING CULTURAL IMPACT AND HISTORICAL REINTERPRETATIONS > SHINYHUNTERS ALLEGES FBI DATA BREACH INVOLVING AGENT AND APPLICANT INFORMATION > GREECE'S PRIME MINISTER ACKNOWLEDGES CHALLENGES IN ADAPTING TO AI ADVANCEMENTS > GRAMMARLY'S CANCELATION POLICY TRIGGERS AUTOMATED USER NOTIFICATIONS> NETHERLANDS FACES POTENTIAL US SANCTIONS OVER ICC INVESTIGATIONS > STRATEGIC IMPLICATIONS OF ABANDONING SCIENTIFIC LINUX IN HIGH-PERFORMANCE COMPUTING ENVIRONMENTS > F5 ADDRESSES CRITICAL ZERO-DAY VULNERABILITY IN BIG-IP APM ALLOWING UNAUTHENTICATED RCE ON OAUTH SERVERS > CHINESE THREAT ACTORS EXPLOIT CHROME-WINDOWS ZERO-DAY CHAIN FOR CLEANGULP MALWARE DEPLOYMENT > IMPLEMENTING JEV CLASSIFICATION MODEL IN PYTHON > CRITICAL NEXT.JS IMAGERESPONSE VULNERABILITY ENABLES SERVER CODE EXECUTION THROUGH MALICIOUS SVG INPUT > THE 1893 WORLD'S FAIR'S LASTING CULTURAL IMPACT AND HISTORICAL REINTERPRETATIONS > SHINYHUNTERS ALLEGES FBI DATA BREACH INVOLVING AGENT AND APPLICANT INFORMATION > GREECE'S PRIME MINISTER ACKNOWLEDGES CHALLENGES IN ADAPTING TO AI ADVANCEMENTS > GRAMMARLY'S CANCELATION POLICY TRIGGERS AUTOMATED USER NOTIFICATIONS