Google fixes Chrome zero-day security flaw used in hacking campaign targeting journalists

Google says it has set a weakness in the Chrome browser for Windows that contaminated hackers have used the damaged computer to enter the computer.

A Short note Google said on Tuesday that it fixed the weakness, Has been tracked as CV -2025-2783Earlier this month, researchers from Casparsky, a security agency, discovered.

Google says it was aware of the reports that an absorption for the bug was “existing in the wild”. The bug is mentioned as a Zero-day The reason the seller – in this case Google – no time was given to fix the bug.

According to Caspersky, the bug was used as part of a hacking promotion aimed at the ongoing Windows computers of Chrome.

In Post a blogCaspersky called the campaign “Operation Forum Troll” and said victims were invited to a global political summit in Russia with a phishing email. When a link was clicked on the email, the victims were taken to a contaminated website that used the bug immediately to get access to the victim’s PC data.

Caspersky has been supplied Detailed About the bug during the chrome patch, however, the buggy allows the attackers to bypass the chrome’s sandbox protection, which limit the browser access to other data on the user’s computer. Caspersky said that the bugs affect all other browsers based on Google’s Chromium engine.

In An individual analysisCaspersky said that the bug was probably used to promote a spying, usually designed to monitor and steal data from a target device during a period of time. The Russian-Sadar Office Protection Agency has said that hackers have sent personalized phishing emails to Russian media representatives and staff to the educational institution.

It is unclear who used this bug, but Casparsky has blamed this promotion to a potential state-sponsored or government-backed hackers group.

Browers like Chrome are frequently aims for malicious hackers and government-backed groups. Zero-day bugs can be broken at high prices in their protective devices to the victim’s sensitive device. In 2024, there was a zero-day broker Million for absorbable bugs offers up to 3 million It can be trigger from the Internet.

Google says Chrome updates will be roll out in the coming days and weeks.