Russian media, academia targeted in espionage campaign using Google Chrome zero-day exploit

Kaspersky identified a sophisticated espionage campaign named Operation ForumTroll that used phishing links exploiting a Chrome zero-day (CVE-2025-2783) to bypass the browser sandbox and infect targets (media and educational institutions) without additional user action; Google confirmed active exploitation and pushed a security update. The report also references related spyware (LianSpy) and earlier campaigns, and Kaspersky assesses the operation as likely state-sponsored.