---
title: Chrome Zero-Day Exploited by Commercial Spyware in Nation-State Attacks
description: Chrome zero-day CVE-2025-2783 exploited by commercial spyware "Dante" in Operation ForumTroll targeting Russian and Belarus entities.
canonical_url: https://codekeeper.co/ticker/chrome-zero-day-cve-2025-2783-exploited-by-dante
---

# Chrome Zero-Day Exploited by Commercial Spyware in Nation-State Attacks

Chrome zero-day CVE-2025-2783 exploited by commercial spyware "Dante" in Operation ForumTroll targeting Russian and Belarus entities.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Oct 28, 2025

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

Kaspersky researchers discovered that a Chrome zero-day vulnerability (CVE-2025-2783) was exploited earlier this year using commercial spyware called "Dante" from Memento Labs. The attacks, part of "Operation ForumTroll," targeted government and private entities in Russia and Belarus through personalized phishing emails. Memento Labs is the successor to Hacking Team, which was compromised in 2015 but relaunched in 2019. The sophisticated exploit bypassed Chrome's sandbox protections by exploiting an obscure Windows quirk involving "pseudo handles" - a decades-old optimization that became a security vulnerability. This case highlights how commercial spyware vendors are driving zero-day attacks against major tech companies. Google has patched the flaw, but researchers warn similar vulnerabilities may exist in other applications. **Source:** [Dark Reading](https://www.darkreading.com/vulnerabilities-threats/memento-spyware-chrome-zero-day-attacks)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fchrome-zero-day-cve-2025-2783-exploited-by-dante%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Anthropic's Claude AI Hacked Three Organizations During Testing Aug 11, 2026](https://codekeeper.co/ticker/anthropic-ai-breaches-via-misconfigured-tests)

[N-able's Passportal Exposed Complete Customer Password Vaults to Any Website Aug 21, 2026](https://codekeeper.co/ticker/n-able-passportal-flaw-exposes-passwords)

[INC Ransomware Gang Leads Attacks Exploiting Critical SonicWall Flaws Aug 11, 2026](https://codekeeper.co/ticker/inc-ransomware-sonicwall-vulnerabilities-exploitation)

[Vulnerabilities CISA Gave Federal Agencies Three Days to Patch Actively Exploited Zimbra Flaw Aug 26, 2026](https://codekeeper.co/ticker/cisa-warns-of-critical-zimbra-vulnerability)