Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Tencent Patches Critical Flaw in Sogou Input Method After GrayRabbit Attacks

China-aligned UNC3569 exploited a legacy Chromium engine in Tencent's Sogou Input Method to deploy GrayRabbit malware. Update to version 16.3.0.3498 to secure your device.

Hackers exploit Tencent app flaw to deploy GrayRabbit malware

Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor.

One Click on a Malicious Link Lets Hackers Backdoor Sogou Input Method Users

A single click on a malicious link could have given attackers a direct path into Windows systems running Sogou Input Method. The flaw turned a commonly installed Chinese-language typing tool into an entry point for the GRAYRABBIT backdoor, exposing users to espionage, data theft, and remote control of their computers. The attack was not based […]

Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution

Chinese hackers are exploiting CVE-2026-51990, a critical one-click RCE vulnerability in Tencent's Sogou Input Method, to deploy backdoors.

China-Linked Hackers Exploit Sogou One-Click RCE to Deploy GRAYRABBIT Backdoor

China-linked threat actors tracked as UNC3569 have exploited a critical one-click remote code execution vulnerability in Tencent’s Sogou Input Method for… Read more →