Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
Chinese Hackers Chain Chrome and Windows Zero-Days to Deploy Backdoors and Steal Credentials
Threat Actors
Excerpt
A newly disclosed chain of vulnerabilities in Google Chrome and the Windows kernel can compromise targets, deploy espionage malware, and steal browser credentials. According to Volexity, UTA0560 and JungleBamboo, also tracked as APT31, Violet Typhoon, and TA412, used an identical multi-stage exploit chain in spear-phishing operations against different victim sets. The campaign abused Chrome vulnerability CVE-2026-85046 , a type-confusion flaw in the V8 JavaScript engine.…
Read the original report →Diamond Model
Adversary(2)
Infrastructure
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-85046 | High | Score 79/100 | First seen |
| CVE | CVE-2026-85880 | High | Score 79/100 | First seen |
| CVE | CVE-2026-87491 | High | Score 74/100 | First seen |
IOC Relationship Graph
Building graph…