China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

As cited

Copy frozen at 2026-09-15 08:41 UTC (site build).

vulnerabilities

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

A Chinese threat actor attributed to UTA0560 conducted spear-phishing attacks on multiple non-governmental organizations on September 1, 2026, exploiting recently patched zero-day vulnerabilities in Google Chrome and Microsoft Windows to deploy GRIMWEDGE, a malicious JavaScript backdoor. Volexity identified and tracked the campaign.

Why it matters: NGOs and organizations targeted by nation-state actors need to patch Chrome and Windows immediately and review logs for indicator of compromise (IOC) related to GRIMWEDGE to detect potential intrusions.

Source published

2026-09-15 05:31 UTC

First seen by Cybersecurity Tracker

2026-09-15 07:46 UTC