China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

Chinese threat actor UTA0560 is exploiting Chrome and Windows zero-days in coordinated attacks against NGOs using spear-phishing and reflected XSS on compromised university sites. Victims receive malicious redirects that deploy GRIMWEDGE, a JavaScript backdoor enabling reconnaissance and further compromise. This is a live campaign with no public patches available.