Google Chrome Zero-Day Vulnerability (CVE-2025-2783) Used by TaxOff to Spread Trinper Backdoor
- 4 gün önce
- 2 dakikada okunur
Güncelleme tarihi: 2 gün önce
An attacker group known as "TaxOff" in the cybersecurity world has managed to infiltrate systems by exploiting an unpatched vulnerability they discovered in the Google Chrome browser. By planting a hidden backdoor they call "Trinper" into target computers, this group quickly turned the security flaw to their advantage. Following the detection and reporting of the situation by cybersecurity researchers, Google released an urgent update to patch the dangerous vulnerability.
The starting point of the attack was a highly innocent-looking fake email. The malware was instantly installed with a single click on the devices of victims who clicked the link in this phishing message, which was disguised as an invitation to an international event. Once settled in the system, this spyware operates silently in the background, logging keystrokes, collecting device information, and stealing critical data, specifically targeting office documents and PDF files. Furthermore, it allows the attackers to take complete control of the device and execute any command remotely.
Detailed investigations by experts revealed that this group has actually been operating with similar tactics for months. Having previously used deceptive methods such as fake telecommunication maintenance announcements and conference invitations, the hackers had also targeted vulnerabilities in different browsers. This situation clearly demonstrates that organized attackers are constantly developing new strategies to infiltrate secure infrastructures and remain undetected in systems for extended periods.
Some of the precautions we need to take to protect against these types of attacks include:
Do not open emails from untrusted sources.
Use multi-factor authentication (MFA).
Keep your system updated to the latest version at all times.
Monitor login logs regularly.
Track the security of mobile devices.
For detailed information, you can reach out to our experts at info@zerosecond.ae
Yorumlar