Chinese Hackers Exploit Windows Zero-Day Vulnerability Against European Diplomats

First seen 4 Nov 2025, 11:09 UTC • Winbuzzer

•50

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Chinese state-sponsored hackers are exploiting a Windows zero-day vulnerability (CVE-2025-9491) to target European diplomats. The exploit involves using unpatched Windows shortcut files to deploy PlugX spying software, allowing attackers to gain deep access to compromised systems. This campaign has been linked to ongoing Chinese espionage efforts since at least 2017.

How this analysis works

Attack Flow

Continue Reading

MuddyWater Targets U.S. Entities Amid Geopolitical Tensions OceanLotus Shifts Focus to Domestic Espionage with SPECTRALVIPER Attacks China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware Showboat Malware Targets Telecoms in China-Aligned Cyber Espionage Campaign TA416 Resumes Cyber Espionage Against European Governments Amid Geopolitical Tensions LongNosedGoblin and UAT-8302: New China-Aligned APT Threats Targeting Governments

Chinese Hackers Exploit Windows Zero-Day Vulnerability Against European Diplomats

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading