Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

Mem3nt0 mori

Kaspersky Securelistby @Securelist ()13 min read1 · 1 read
Analyze CVE-2025-2783 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-2783
Sandbox Escape via Mojo Handle Flaw in Google Chrome on Windows (CVE-2025-2783)
8.39%KEV
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
domainfastly.nettion. In most of the observed cases, the attackers used the Fastly.net cloud infrastructure to host their C2. Attackers frequently

From the original article

13 min read at securelist.com

In March 2025, Kaspersky detected a wave of infections that occurred when users clicked on personalized phishing links sent via email. No further action was required to initiate the infection; simply visiting the malicious website using Google Chrome or another Chromium-based web browser was enough. The malicious links were personalized and extremely short-lived to avoid detection.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.