Google has released an emergency patch for a high-severity critical zero-day vulnerability in Chrome, which has been actively exploited in targeted cyber-espionage attacks against Russian media outlets, educational institutions, and government organizations. The flaw, tracked as CVE-2025-2783, was discovered by Kaspersky researchers Boris Larin and Igor Kuznetsov, and stems from incorrect handle management in Chrome’s Mojo component on Windows, allowing attackers to bypass the browser’s sandbox protections. The exploitation, part of a sophisticated phishing campaign dubbed Operation “ForumTroll”, involved personalized emails disguised as invitations to the legitimate “Primakov Readings” forum. Victims were infected simply by clicking a malicious link, which redirected them to a rogue website and initiated the attack. A second, still-unknown exploit enabled remote code execution (RCE), making the malware deployment highly effective and stealthy. Kaspersky characterized the campaign as technically advanced and attributed it to a likely state-sponsored APT group. Although Google has not disclosed further details about the attackers or the full scope of the threat, users of Chrome and other Chromium-based browsers like Edge, Brave, Opera, and Vivaldi are strongly advised to update to version 134.0.6998.178 or later to mitigate the risk. CTIX analysts urge all Chrome users to turn on automatic browser updates and regularly check for emergency patches to prevent exploitation.