Google has fixed a severe Chrome zero-day vulnerability, known as CVE-2025-2783, which hackers were exploiting to infect systems with malware. The flaw was identified during a probe into a phishing scheme designed to infiltrate Russian media, universities, and government agencies. The exploit bypassed Chrome’s crucial sandbox protection, allowing for the silent deployment of spyware-level malware. Google released a patch, which users can manually install, to rectify the flaw and a related exploit.

New Clickfix Attack Uses DNS Hijacking to Spread Malware – CybersecurityNews
New Clickfix Attack Uses DNS Hijacking to Spread Malware CybersecurityNews


