GOOGLE CHROME ZERO-DAY CVE-2025-2783 EXPLOITED BY TAXOFF TO DEPLOY TRINPER BACKDOOR

Summary from the TLDR InfoSec newsletter

TaxOff threat actors exploited a Google Chrome zero-day vulnerability (CVE-2025-2783) in March to deploy the Trinper backdoor through phishing emails disguised as forum invitations. The backdoor, written in C++, uses multithreading to steal files, capture keystrokes, and maintain command-and-control communications with remote servers. Google patched the vulnerability after Kaspersky reported the exploitation. Researchers suspect TaxOff may be connected to another hacking group called Team46 based on similar attack patterns.