CLEANGULP

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 22, 2026
Last mentionedSep 22, 2026

Timeline

1 articles · newest first

Chinese APT Clones Legitimate Websites to Deliver Chrome and Windows Zero-Day Exploits

Volexity links third Chinese actor UTA0565 to typosquatted phishing sites chaining Chrome and Windows zero-days to deploy CLEANGULP backdoor.

GBHackersSep 22, 09:01 UTC · Sep 22, 2026Threat actorExploitedCVE-2026-85046 CVE-2026-87491 CVE-2026-8588011 · 3 reads

Related CVEs

by mentions

CVE-2026-874914%8.8
Actively Exploited Out-of-Bounds Write in Google Chrome V8
published Sep 9, 2026Google Chrome (V8 JavaScript engine; tracked by CISA as 'Google Chromium V8')KEV
CVE-2026-850462%8.8
Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
published Sep 3, 2026Google ChromeKEVPoC ×6
CVE-2026-85880<1%7.8
Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
published Sep 8, 2026Microsoft Windows 10KEV

Appears with

Microsoft Windowsorganization · 1
Volexityorganization · 1
JungleBambooorganization · 1
UTA0560organization · 1
Proofpointorganization · 1
APT31threat actor · 1
UTA0565organization · 1
Google Chromeorganization · 1

Entities are extracted by the model from each article. First seen Sep 22, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.