Chinese Hackers Exploit Chrome and Windows Zero-Days to Deploy CLEANGULP Malware

A Chinese threat actor is actively exploiting a zero-day exploit chain affecting Google Chrome and Microsoft Windows via malicious websites. The campaign chains three distinct vulnerabilities to bypass security controls and deploy the CLEANGULP malware. Administrators are strongly advised to apply the latest security patches for both Chrome and Windows immediately to mitigate compromise risks.