China-Linked Hackers Use Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

The Chinese threat actor UTA0560 used a Chrome and Microsoft Windows exploit chain in a September 1, 2026 spear-phishing campaign targeting multiple non-governmental organizations to deliver the GRIMWEDGE JavaScript backdoor. A similar chain was used by JungleBamboo, also known as APT31, to deploy SUPERSTOMP and LONGTALE.