> TritonInfoSec News
Home / Sep 12, 2026 / Story
0
#6 The Hacker News general September 11, 2026 at 07:14 UTC

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

By [email protected] (The Hacker News)

AI Summary

China-linked threat group UNC3569 exploited a vulnerability in Sogou Input Method — one of the most widely used Chinese-character input tools on Windows — to deploy the GRAYRABBIT backdoor via a crafted link. Gen Digital published the research on September 11; Tencent owns Sogou, adding supply-chain implications for Chinese-language Windows users worldwide.

Read full article → https://thehackernews.com/2026/09/china-linked-unc…

Relevance score: 82.0/100

# More from September 12

  1. 1
    GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure The Hacker News
  2. 2
    Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware The Hacker News
  3. 3
    Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors The Hacker News
  4. 4
    AI-powered attack exploited PaperCut flaws to hack 395 organizations BleepingComputer
  5. 5
    Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection The Hacker News
  6. 7
    Critical NetScaler Vulnerability Exploited in Attacks SecurityWeek
  7. 8
    Trezor: 347,000 users targeted in phishing attacks after Brevo breach BleepingComputer
  8. 9
    Florida confirms DMV database breached via stolen police account BleepingComputer
  9. 10
    Ukrainian hacker gets four years in US prison over Conti ransomware attacks The Record