Story perspectives

Chrome Zero-Day Exploited for Cyber-Espionage in Eastern Europe

10/27/2025

33 3

Summary

Story summary

The Mem3nt0 mori hacking group exploited a zero-day in Google Chrome, CVE-2025-2783, to conduct cyber-espionage in Russia and Belarus.
The flaw allowed attackers to bypass Chrome's sandbox and deploy spyware via spear-phishing campaigns.
Kaspersky researchers linked the operation ForumTroll to the commercial spyware Dante developed by Memento Labs.
LeetAgent established persistence and communicated with command-and-control servers, with targets including media and government sectors, and users should update Chrome.

1 of 1

Story summary

The Mem3nt0 mori hacking group exploited a zero-day in Google Chrome, CVE-2025-2783, to conduct cyber-espionage in Russia and Belarus.
The flaw allowed attackers to bypass Chrome's sandbox and deploy spyware via spear-phishing campaigns.
Kaspersky researchers linked the operation ForumTroll to the commercial spyware Dante developed by Memento Labs.
LeetAgent established persistence and communicated with command-and-control servers, with targets including media and government sectors, and users should update Chrome.