Story perspectives

Chrome Zero-Day Exploited in Spyware Attack on Russia

10/29/2025

50 11

Summary

Story summary

A zero-day vulnerability in Google Chrome, CVE-2025-2783, was exploited in March 2025 to distribute LeetAgent spyware developed by Memento Labs.
The campaign, named Operation ForumTroll, targeted organizations in Russia and Belarus through phishing emails inviting recipients to the Primakov Readings forum.
Kaspersky researchers identified a second spyware, Dante, used with LeetAgent, which exhibits sophisticated evasion techniques and is linked to the same threat actor.

1 of 1

Story summary

A zero-day vulnerability in Google Chrome, CVE-2025-2783, was exploited in March 2025 to distribute LeetAgent spyware developed by Memento Labs.
The campaign, named Operation ForumTroll, targeted organizations in Russia and Belarus through phishing emails inviting recipients to the Primakov Readings forum.
Kaspersky researchers identified a second spyware, Dante, used with LeetAgent, which exhibits sophisticated evasion techniques and is linked to the same threat actor.