Hackers used Chrome and Windows bugs to sneak into aid groups
Researchers say a China-linked group used a highly targeted email campaign to break into computers by taking advantage of recently fixed problems in Google Chrome and Microsoft Windows. The attacks were aimed at several non-governmental organizations, showing that people and groups using outdated software may be at risk if they open suspicious messages or links.
Who is at risk
Organizations such as non-profits, advocacy groups, and their staff are most at risk, especially if their Chrome browser or Windows computers have not been updated.
What to watch for
Watch for unexpected emails, links, or documents, along with devices acting strangely after clicking something, such as sudden pop-ups, browser crashes, or unusual background activity.
What to do
Immediately update Google Chrome and Microsoft Windows on all devices, and avoid opening unexpected links or attachments until updates are confirmed installed.