TrueConf Vulnerability Under Active Exploitation in Southeast Asia Government Attacks

**Executive Summary:** Check Point Research disclosed CVE-2026-3502, a high-severity flaw in the TrueConf client update mechanism exploited in Operation TrueChaos to deliver Havoc post-exploitation payloads; a compromised central TrueConf server pushed a malicious update that used DLL side-loading and privilege escalation to infect dozens of government endpoints, and researchers provided IOCs (malicious update filenames, DLL hashes, and C2 IPs) and recommended applying vendor patch 8.5.3 immediately.