other

UTA0560

Volexity's tracking designation for a Chinese threat actor associated with donation-themed spear-phishing aimed at non-governmental organisations.

Current clusters

security1 publisher

Volexity caught two Chinese groups running byte-identical Chrome exploit code against NGOs

CVE-2026-85046 was reported to Chromium on August 4 and fixed in the open-source tree, but no shipped Chrome build carried that fix when UTA0560 and JungleBamboo began using it against NGOs on September 1.

Publishers:volexity.com

Reality

Evidence64
Adoption58
Hype gap−8
Incentives60
Confidence60