volexity.com

UTA0565 Used Fake Websites to Deliver Chrome and Windows Zero-Day Exploits

Volexity linked Chinese APT actor UTA0565 to phishing campaigns using fake websites and chained Chrome and Windows zero-days to deliver CLEANGULP malware.

Sep 21, 2026

Volexity Details Chinese Actors’ Chrome–Windows Exploit Chain Used in Two Espionage Campaigns

Volexity reports that UTA0560 and JungleBamboo used the same Chrome–Windows exploit chain in phishing campaigns, despite a gap between Chromium fixes and Chrome releases, to deploy distinct backdoors and credential-stealing malware.

Sep 9, 2026

Volexity Details Zero-Day Exploitation of SonicWall SMA VPN Appliances

Volexity traced UTA0533’s compromise of SonicWall SMA 1000 appliances to two zero-days, detailing the exploit chain, malware, post-compromise activity, indicators, and available patches.

Jul 17, 2026