Bleepingcomputer Chinese Hackers Exploit Windows Zero-Day to Target European Diplomats
Article Content
Browse articles 
A China-linked hacking group, UNC6384, has exploited a Windows zero-day vulnerability to conduct cyber espionage against European diplomats in Hungary, Belgium, and other nations. The attacks, which occurred in September and October 2025, involved spearphishing emails that delivered malicious LNK files, allowing the attackers to execute arbitrary code on compromised systems. The vulnerability, identified as CVE-2025-9491, remains unpatched by Microsoft.
Ask AI about this cluster
Answers cite the sources they use
Updated 219d ago How this analysis works
More articles in this cluster (18)
Following this threat?
Track Mustang Panda, PlugX and CVE-2025-9491 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Mustang Panda Escalates Cyberattacks on European Maritime Sector Chinese hacking group Mustang Panda has intensified cyberespionage campaigns targeting maritime organizations across at least seven EU member states throughout 2025. The European Union Agency for Cybersecurity (ENISA) reported that these attacks primarily focus on espionage and strategic intelligence collection, with… 
Chinese TA419 Group Targets AI Policy Experts with Phishing Campaigns The Chinese cyberespionage group TA419 has been targeting U.S. AI policy experts through credential phishing campaigns. These attacks, documented by Proofpoint, involved impersonating a former White House OSTP official and prominent economists to gain access to sensitive accounts. The phishing tactics employed…