Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
Chinese actor UTA0565 chains three Chrome and Windows zero-days via fake NGO media sites to drop CLEANGULP backdoor malware on Asian government targets.
92
Organization
Microsoft Windows
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 22, 2026
- Last mentionedSep 23, 2026
Timeline
2 articles · newest firstChinese APT Clones Legitimate Websites to Deliver Chrome and Windows Zero-Day Exploits
Volexity links third Chinese actor UTA0565 to typosquatted phishing sites chaining Chrome and Windows zero-days to deploy CLEANGULP backdoor.
85
Related CVEs
by mentions- CVE-2026-874914%8.8Actively Exploited Out-of-Bounds Write in Google Chrome V8
- CVE-2026-850462%8.8Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
Appears with
- Volexityorganization · 2
- UTA0565organization · 2
- Google Chromeorganization · 2
- CLEANGULPorganization · 1
- APT31threat actor · 1
- Proofpointorganization · 1
- JungleBambooorganization · 1
- UTA0560organization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.