Chinese Hackers Exploit ChromeWindows ZeroDay Chain to Deploy CLEANGULP Malware

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google ChromeMicrosoft Windows exploit chain as zerodays through fake websites The attacks detected on September 3 and 4 2026 involved the chaining of two vulnerabilities in Chrome CVE202685046 CVE202687491 and one impacting Windows Advanced Local Procedure Call CVE202685880 to break