Chinese Hackers Exploit Windows Zero-Day to Target European Diplomats

A China-linked hacking group, UNC6384, has exploited a Windows zero-day vulnerability to conduct cyber espionage against European diplomats in Hungary, Belgium, and other nations. The attacks, which occurred in September and October 2025, involved spearphishing emails that delivered malicious LNK files, allowing the attackers to execute arbitrary code on compromised systems. The vulnerability, identified as CVE-2025-9491, remains unpatched by Microsoft.