A Chinese threat actor, UTA0565, has been observed exploiting a chain of recently disclosed zero-day vulnerabilities in Google Chrome and Microsoft Windows. The attack chain, detected in early September, leverages flaws in Chrome (CVE-2026-85046, CVE-2026-87491) and Windows Advanced Local Procedure Call (CVE-2026-85880) to achieve privilege escalation and deploy CLEANGULP malware. This sophisticated campaign uses fake websites to deliver the exploit, demonstrating a high level of operational capability.