Chinese Hackers Exploit Windows Zero-Day to Target European Diplomats

First seen 2 Dec 2025, 18:33 UTC • Winbuzzer

•48

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Chinese hackers are exploiting a Windows zero-day vulnerability (CVE-2025-9491) to conduct espionage against European diplomats. The flaw allows the installation of PlugX spying software, granting attackers extensive access to compromised systems. This campaign is part of a long-running espionage effort attributed to Chinese state-sponsored actors.

How this analysis works

Attack Flow

Continue Reading

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions OceanLotus Shifts Focus to Domestic Espionage with SPECTRALVIPER Attacks China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware Showboat Malware Targets Telecoms in China-Aligned Cyber Espionage Campaign TA416 Resumes Cyber Espionage Against European Governments Amid Geopolitical Tensions LongNosedGoblin and UAT-8302: New China-Aligned APT Threats Targeting Governments

Chinese Hackers Exploit Windows Zero-Day to Target European Diplomats

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading