China-Linked Hackers Chain Chrome Zero-Day With Windows Kernel Flaw in Attacks
Volexity reports China-linked UTA0560 and JungleBamboo chained Chrome zero-day CVE-2026-85046 with kernel flaws to spy on NGOs.
85
Threat actor
JungleBamboo
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenSep 10, 2026
- Last mentionedSep 12, 2026
Timeline
3 articles · newest firstNew 'BlueMoon' kit exploited Windows and Chrome zero-day flaws
Multiple China-linked espionage groups share the BlueMoon exploit kit chaining Chrome V8 zero-days and a Windows ALPC LPE to deploy backdoors.
85
Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days
Proofpoint reports four nation-state actors, mostly China-nexus, adopted the BlueMoon Chrome and Windows zero-day exploit kit within 12 days, targeting US organizations.
85
Related CVEs
by mentions- CVE-2026-850462%8.8Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-874914%8.8Actively Exploited Out-of-Bounds Write in Google Chrome V8
Appears with
- Volexityvendor · 3
- Microsoftvendor · 3
- Googlevendor · 3
- APT31threat actor · 3
- Violet Typhoonthreat actor · 2
- UNK_LateNightthreat actor · 2
- Grimwedgemalware · 2
- Google Chromeproduct · 2
- UTA0560threat actor · 2
- Volexityorganization · 2
- Proofpointvendor · 2
- TA412threat actor · 2
- Microsoft Windowsproduct · 1
- Proofpointorganization · 1
- SUPERSTOMPmalware · 1
- UNK_DoubleCheckthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.