{"vulnerability": "CVE-2026-51990", "sightings": [{"uuid": "744d592a-bf6e-4938-9d09-4a198f02403f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv7gylfsk32x", "content": "CVE-2026-51990 in Sogou Input Method enabled one-click RCE via a crafted sgbiz: link. UNC3569 used the flaw in the wild to deploy the GRAYRABBIT backdoor; Tencent has patched it. #CVE202651990 #GRAYRABBIT #Tencent", "creation_timestamp": "2026-09-11T01:45:27.650198Z"}, {"uuid": "5f925903-2ae1-4f6e-ac7b-263c3d8ad3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3mvaad7oiu22w", "content": "Gen traced the payload to Alibaba Cloud in Hong Kong. A downloader dropped a malicious DLL and encrypted GRAYRABBIT, providing remote shell access, file transfer and module loading. Tencent fixed CVE-2026-51990, but Sogou still ships Chromium 80. The outdated browser remains a concern. #threatintel", "creation_timestamp": "2026-09-11T09:18:54.461848Z"}, {"uuid": "99ea2fce-f53f-4f1b-8901-fe7d3b250665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3mvaaddzh5c2w", "content": "Gen traced the payload to Alibaba Cloud in Hong Kong. A downloader dropped a malicious DLL and encrypted GRAYRABBIT, providing remote shell access, file transfer and module loading. Tencent fixed CVE-2026-51990, but Sogou still ships Chromium 80. The outdated browser remains a concern. #threatintel", "creation_timestamp": "2026-09-11T09:18:55.365058Z"}, {"uuid": "42431f03-1a44-44c9-b817-8b7ea8bed778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3mvaaddzh5d2w", "content": "Gen traced the payload to Alibaba Cloud in Hong Kong. A downloader dropped a malicious DLL and encrypted GRAYRABBIT, providing remote shell access, file transfer and module loading. Tencent fixed CVE-2026-51990, but Sogou still ships Chromium 80. The outdated browser remains a concern. #threatintel", "creation_timestamp": "2026-09-11T09:18:56.474579Z"}, {"uuid": "3911f07d-0777-4eb6-bd12-d4cce8d7e78f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://infosec.exchange/users/VirusBulletin/statuses/117251911529981002", "content": "Gen Threat Labs discovered a critical remote code execution vulnerability (CVE-2026-51990) in Sogou Input Method. The vulnerability is actively exploited in the wild by the UNC3569 threat group to deploy the GRAYRABBIT backdoor through a crafted link. https://www.gendigital.com/blog/insights/research/one-click-backdoor-sogou", "creation_timestamp": "2026-09-11T10:23:07.108761Z"}, {"uuid": "4eac7ceb-b2e9-440f-b6b1-61a48aa8e1d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3mvadwdob2k2h", "content": "Gen Threat Labs discovered a critical remote code execution vulnerability (CVE-2026-51990) in Sogou Input Method. The vulnerability is actively exploited in the wild by the UNC3569 threat group to deploy the GRAYRABBIT backdoor through a crafted link. www.gendigital.com/blog/insight...", "creation_timestamp": "2026-09-11T10:23:22.808860Z"}, {"uuid": "e7447e0b-8407-46f3-b9f0-67cf211e244d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvagi4duei2g", "content": "\ud83e\udd16 China-linked UNC3569 exploited a Sogou Input Method flaw (CVE-2026-51990) to drop the GRAYRABBIT backdoor. Crafted link \u2192 unpatched Chromium 80, sandbox off. Tencent patched it (v16.3.0.3498). Gen Digital.\nhttps://thehackernews.com/2026/09/china-linked-unc3569-exploited-sogou.html", "creation_timestamp": "2026-09-11T11:08:54.847563Z"}, {"uuid": "2a6e846a-9a6b-4ec0-a220-3c5d2881a635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvatu2ig6a2l", "content": "China-linked group UNC3569 abused a flaw in Sogou Input Method (CVE-2026-51990) to chain into a Chrome bug and drop the GRAYRABBIT backdoor. Update to Sogou v16.3.0.3498+. https://thehackernews.com/2026/09/china-linked-unc3569-exploited-sogou.html", "creation_timestamp": "2026-09-11T15:08:14.068006Z"}, {"uuid": "c6750375-6b87-4357-9a4b-8eea5a1dba38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mvfsio5yik2g", "content": "Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor.", "creation_timestamp": "2026-09-13T14:27:19.106771Z"}, {"uuid": "cec3fcf6-66f8-4f39-8e24-ac84f0c241ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvft6tbeud2v", "content": "\u30cf\u30c3\u30ab\u30fc\u304cTencent\u30a2\u30d7\u30ea\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3001GrayRabbit\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u5c55\u958b\n\n\u4e2d\u56fd\u3068\u95a2\u4fc2\u304c\u6df1\u3044\u30b9\u30d1\u30a4\u6d3b\u52d5\u30b0\u30eb\u30fc\u30d7\u306b\u95a2\u9023\u3059\u308b\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304c\u3001Tencent\u306e\u300c\u635c\u72d7\u8f93\u5165\u6cd5\uff08Sogou Input Method\uff09\u300dWindows\u7248\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027(CVE-2026-51990)\u3092\u60aa\u7528\u3057\u3001\u30d0\u30c3\u30af\u30c9\u30a2\u300cGrayRabbit\u300d\u3092\u5c55\u958b\u3057\u3066\u3044\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 \u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696dGen Dig", "creation_timestamp": "2026-09-13T14:39:40.966066Z"}, {"uuid": "0bc0d0bb-e25f-4422-b140-4ae2e3c3f421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvfubgyoa22t", "content": "\ud83e\udd16 CVE-2026-51990 (critical): one-click RCE in Tencent's Sogou Input Method, exploited by UNC3569 to deploy GrayRabbit backdoor. Unsandboxed Chromium chain, fixed in v16.3.0.3498.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-13T14:59:02.386070Z"}, {"uuid": "8a938e66-a4b4-4ea9-a19d-afbfc7af2f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mvfulvwlzq2j", "content": "CVE-2026-51990 in Tencent's Sogou Input Method for Windows is being exploited by China-aligned actors to deploy the GrayRabbit backdoor.", "creation_timestamp": "2026-09-13T15:04:53.833999Z"}, {"uuid": "6424fec7-d8f3-4693-9018-a622cff7f149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvfxzbkbhw2b", "content": "Tencent\u306eSogou Input Method for Windows\u306b\u8106\u5f31\u6027\uff08CVE-2026-51990\uff09\u304c\u3042\u308a\u3001\u4e2d\u56fd\u7cfb\u653b\u6483\u8005\u306b\u3088\u308aGrayRabbit\u30de\u30eb\u30a6\u30a7\u30a2\u304c\u5c55\u958b\u3055\u308c\u3066\u3044\u308b\u3002", "creation_timestamp": "2026-09-13T16:06:04.234300Z"}, {"uuid": "32677624-4d66-4299-931d-0326310bc8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvfyigrsf622", "content": "Sogou Input Method CVE-2026-51990 is being exploited to deploy the GrayRabbit backdoor on Windows \u2014 remove or isolate affected clients until vendor guidance is available. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-13T16:14:31.798754Z"}, {"uuid": "89a74a94-2d80-4136-92ea-df83fa358bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mvg6igchpr2e", "content": "\ud83d\udd12 Hackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in ...\n\nhttps://tinyurl.com/242jfs9u #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-09-13T18:01:53.530150Z"}, {"uuid": "c66cb88d-e46f-4678-b71d-76e36f8ea15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "content": "Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]", "creation_timestamp": "2026-09-13T19:00:41.904613Z"}, {"uuid": "948eb280-5dbd-40ba-a86b-746ac49e364f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvgpndnyuu26", "content": "\ud83e\udd16 China-aligned UNC3569 exploiting CVE-2026-51990, a critical one-click RCE in Tencent's Sogou Input Method for Windows, deploying the GrayRabbit backdoor.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-13T23:08:52.185883Z"}, {"uuid": "84c411c6-f60c-4c80-9c1d-a4dd2c3c9d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvgsniv5fs2z", "content": "Defend against the CVE-2026-51990 Sogou exploit. Discover how hackers use this one-click flaw to drop backdoors and how to secure your systems today.\n\n#CVE202651990 #SogouInputMethod #CyberSecurity #UNC3569 #InfoSec #EndpointSecurity #ThreatIntel", "creation_timestamp": "2026-09-14T00:02:38.960432Z"}, {"uuid": "17bc2e86-6cfd-4a3e-bf8e-63ee1326711d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "content": "Threat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]", "creation_timestamp": "2026-09-14T01:00:35.102663Z"}, {"uuid": "b38d98f7-89be-4925-b007-c8e8db6b5714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-14T03:00:15.370885Z"}, {"uuid": "46169bb2-ac8c-447a-b9ba-186f85920b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhabw3evq2i", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:06:42.379690Z"}, {"uuid": "10962387-8b74-4227-a02d-c183467828aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvhabwj2xn2k", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email BO CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #PotatoSecurity", "creation_timestamp": "2026-09-14T04:06:43.006856Z"}, {"uuid": "689684bb-fcf5-48ba-9cd1-facb36cc3511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhacnfvtx2e", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:07:06.877402Z"}, {"uuid": "98349b1e-c4bc-40bc-b049-8d0ebb225c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhaflnz2v2l", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:08:46.124799Z"}, {"uuid": "20be35c7-7ea1-46da-a6da-57dfb9d236e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhagjon4q2j", "content": "2/ PHISHING & MALWARE: Microsoft details AI-assisted CEO fraud (1M+ emails, Aug 3-5) + passkey-themed attacks hijacking cloud accounts. UNC3569 exploits Tencent Sogou Input Method (CVE-2026-51990) \u2014 one-click RCE \u2014 to deploy GrayRabbit backdoor. Src: TheHackerNews, BleepingComputer", "creation_timestamp": "2026-09-14T04:09:17.164440Z"}, {"uuid": "9155bc54-f7a9-4a87-9105-799f05d3a5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvhhznyusb2q", "content": "CVE-2026-51990 is trending. Hype score 5, currently #5 on cvemon.\n\nCurrently trending CVE - Hype Score: 5\n\nhttps://cvemon.intruder.io/cves/CVE-2026-51990", "creation_timestamp": "2026-09-14T06:25:16.244461Z"}, {"uuid": "ddda9b84-2b22-44f2-a543-332943273d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvhjwehwaz2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 26 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-20079: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 7 interactions\nCVE-2026-90561: 4 interactions\nCVE-2025-59287: 3 interactions\n", "creation_timestamp": "2026-09-14T06:59:12.737425Z"}, {"uuid": "074307c2-4ae2-4e84-b762-d526e846a002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/HackerNewscyber/3457", "content": "\u2708 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Sogou \u0628\u0631\u0627\u06cc \u0627\u0646\u062a\u0634\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit\n\n\u00a9\ufe0f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0646\u062a\u0633\u0628 \u0628\u0647 \u06af\u0631\u0648\u0647 \u0647\u0645\u0633\u0648 \u0628\u0627 \u0686\u06cc\u0646 UNC3569 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-51990 \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 Sogou Input Method \u0634\u0631\u06a9\u062a Tencent \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u0631\u0627 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0645\u0633\u062a\u0642\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062d\u0645\u0644\u0647 \u0628\u0627 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628 \u0622\u063a\u0627\u0632 \u0634\u062f\u0647 \u0648 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646\u060c \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc Sogou \u0648 \u06cc\u06a9 \u0646\u0633\u062e\u0647 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0628\u062f\u0648\u0646 sandbox \u0627\u0632 Chromium\u060c \u06a9\u062f \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u06cc\u06a9 \u0628\u06a9\u200c\u062f\u0648\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u062c\u0631\u0627\u06cc \u0641\u0631\u0627\u06cc\u0646\u062f\u0647\u0627\u060c \u0627\u06cc\u062c\u0627\u062f \u067e\u0648\u0633\u062a\u0647 \u0645\u0639\u06a9\u0648\u0633\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0633\u06cc\u0633\u062a\u0645 \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u062f\u0627\u0631\u062f.\n\n\u00a9\ufe0f \u062f\u0631 \u0627\u062f\u0627\u0645\u0647: Tencent \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 16.3.0.3498 \u062f\u0631 \u0622\u0648\u0631\u06cc\u0644 \u06f2\u06f0\u06f2\u06f6 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u0648\u062a\u0648\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc \u0647\u0645\u0686\u0646\u0627\u0646 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0641\u0627\u0642\u062f sandbox \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062e\u0637\u0631\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-14T07:00:04.456822Z"}, {"uuid": "43a58e24-d7aa-4c2e-99d3-ed4c614e2cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/ransomnews.online/post/3mvhlzz7pwo2e", "content": "\u26a0\ufe0f\ud83d\udc30  Tencent flaw deploys GrayRabbit\n\nCVE-2026-51990 enables RCE through Sogou Input Method; fixed in version 16.3.\n\n\ud83d\udd17 read more: www.bleepingcomputer...\n\n#ransomNews #cyberthreats #GrayRabbit \n", "creation_timestamp": "2026-09-14T07:37:03.732211Z"}, {"uuid": "d57f03ca-3eba-4363-bd26-d86384b939c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvhs65r4ku2i", "content": "\ud83e\udd16 CVE-2026-51990: a China-aligned espionage group exploits a critical flaw in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. Exploited in the wild.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-14T09:26:43.780606Z"}, {"uuid": "5a42b597-04f3-4367-b5cc-a383bcd850ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvhsn45rp22d", "content": "Hackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]\n#hackernews #news", "creation_timestamp": "2026-09-14T09:35:06.160243Z"}, {"uuid": "aeee5d71-1026-42f3-a3cb-9949b854e6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mvi32jjcl322", "content": "CVE-2026-51990 in Sogou Input Method enables a one-click exploit that injects command-line arguments and uses an outdated, unsandboxed Chromium engine to execute system-level code.\n", "creation_timestamp": "2026-09-14T12:05:46.269421Z"}, {"uuid": "16595b58-7d73-4010-80b5-b19ca2948b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mvianj6ax32k", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: China-Linked Group Exploits CVE-2026-51990 in Sogou Input to Drop GrayRabbit\n\n#APT #ThreatIntel #CyberSecurity", "creation_timestamp": "2026-09-14T13:45:51.642321Z"}, {"uuid": "c47e7677-6b4a-48f1-8f9c-2ebd6467c9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mvimplvgsp2w", "content": "Here we go again with the predictable horror of end users running Tencent's Sogou Input Method for Windows walking straight into CVE-2026-51990. Threat actors are gleefully exploiting this high-severity mess in the wild to compromise endpoints and distribute lovely GrayRabbit mal...\n\nRead full story", "creation_timestamp": "2026-09-14T17:21:46.453217Z"}, {"uuid": "be5f7075-5e02-4d57-bf9e-300935a05373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://t.me/BleepingComputer/25549", "content": "\u200aHackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-14T20:00:04.912535Z"}, {"uuid": "03bb44cb-7887-462b-930f-ab39cb5286cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://t.me/true_secator/8608", "content": "\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b UNC3569 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-51990) \u0432 Sogou \u0434\u043b\u044f Windows \u043e\u0442 Tencent \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 GrayRabbit \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Gen Digital, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432\u0448\u0438\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 (RCE) \u043e\u0434\u043d\u0438\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438.\n\nSogou Input Method - \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0438\u0435\u0440\u043e\u0433\u043b\u0438\u0444\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439 \u0434\u0432\u0438\u0436\u043e\u043a Chromium.\n\n\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 Sogou Input Method, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0435 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0433\u0438\u0433\u0430\u043d\u0442\u043e\u043c Tencent, \u043f\u043e \u0438\u043c\u0435\u044e\u0449\u0438\u043c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0432 \u041a\u0438\u0442\u0430\u0435 \u0441\u043e\u0442\u043d\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Gen Threat Labs, UNC3569 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435: \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 URI sgbiz, \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0430\u044f \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u044f \u043f\u043e URL-\u0430\u0434\u0440\u0435\u0441\u0430\u043c \u0432 \u0432\u0435\u0431-\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 CEF \u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439, \u043d\u0435\u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u0432\u0438\u0436\u043e\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chromium.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0436\u0435\u0440\u0442\u0432\u0430 \u0449\u0435\u043b\u043a\u0430\u0435\u0442 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u043c\u0443 URI sgbiz:, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e Windows \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 biz_helper.exe \u043e\u0442 Sogou, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0443 SGMyInput.exe \u0431\u0435\u0437 \u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 SkinCenter \u043e\u0442 Sogou \u0438 \u0434\u0430\u044e\u0442 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u043c\u0443 \u0432 \u043d\u0435\u0433\u043e \u0432\u0435\u0431-\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044e Chromium \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c URL-\u0430\u0434\u0440\u0435\u0441, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c. Sogou \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0441\u0445\u0435\u043c\u0443 \u0438\u043b\u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 URL-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\u041d\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u043c \u0434\u0432\u0438\u0436\u043a\u0435 Chromium 80 \u043e\u0442 Sogou. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u0435\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0441 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0432\u0430\u0436\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0437\u0430\u0449\u0438\u0442\u044b, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 GrayRabbit.\n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google\u00a0\u043e\u043f\u0438\u0441\u0430\u043b\u0438 GrayRabbit\u00a0\u043a\u0430\u043a \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u043e\u0435 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0438 \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u0435\u0433\u043e \u0441 UNC3569, \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043a\u0430\u043a \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u043d\u0430\u0439\u043c\u0443.\n\n\u041e\u0431\u0440\u0430\u0437\u0435\u0446 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Gen Threat Labs, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u043e\u043b\u0435\u0435 \u0437\u0440\u0435\u043b\u044b\u0439 64-\u0431\u0438\u0442\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c \u043d\u0430\u0431\u043e\u0440\u043e\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 C2, \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e RC4.\n\n\u0415\u0433\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a, \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432, \u0441\u0431\u043e\u0440 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0444\u043b\u0435\u043a\u0441\u0438\u0432\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0445\u043e\u0441\u0442\u0430.\n\nGen Threat Labs \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0441\u0432\u043e\u0438\u043c\u0438 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0441 Tencent 9 \u0430\u043f\u0440\u0435\u043b\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Sogou Input Method 16.3.0.3498 \u043e\u0442 21 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u041f\u0430\u0442\u0447 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b URL, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u043c\u044b\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e HTTPS \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 Sogou \u0438 Tencent.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u0441\u0442\u0430\u0440\u0435\u043b \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u0435\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b.", "creation_timestamp": "2026-09-14T23:00:03.285122Z"}, {"uuid": "4e593253-2223-4222-ae1c-67a95384c97a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "published-proof-of-concept", "source": "Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.229728Z"}, {"uuid": "9afb4bb4-3aee-4440-afe6-abe812ac3b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/true_secator/8608", "content": "\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b UNC3569 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-51990) \u0432 Sogou \u0434\u043b\u044f Windows \u043e\u0442 Tencent \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 GrayRabbit \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Gen Digital, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432\u0448\u0438\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 (RCE) \u043e\u0434\u043d\u0438\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438.\n\nSogou Input Method - \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Windows, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0438\u0435\u0440\u043e\u0433\u043b\u0438\u0444\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439 \u0434\u0432\u0438\u0436\u043e\u043a Chromium.\n\n\u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 Sogou Input Method, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0435 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0433\u0438\u0433\u0430\u043d\u0442\u043e\u043c Tencent, \u043f\u043e \u0438\u043c\u0435\u044e\u0449\u0438\u043c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0432 \u041a\u0438\u0442\u0430\u0435 \u0441\u043e\u0442\u043d\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Gen Threat Labs, UNC3569 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435: \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0432 URI sgbiz, \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u0430\u044f \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u044f \u043f\u043e URL-\u0430\u0434\u0440\u0435\u0441\u0430\u043c \u0432 \u0432\u0435\u0431-\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 CEF \u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439, \u043d\u0435\u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u0432\u0438\u0436\u043e\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chromium.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0436\u0435\u0440\u0442\u0432\u0430 \u0449\u0435\u043b\u043a\u0430\u0435\u0442 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u043c\u0443 URI sgbiz:, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e Windows \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 biz_helper.exe \u043e\u0442 Sogou, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u043c\u0443 \u0444\u0430\u0439\u043b\u0443 SGMyInput.exe \u0431\u0435\u0437 \u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 SkinCenter \u043e\u0442 Sogou \u0438 \u0434\u0430\u044e\u0442 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u043c\u0443 \u0432 \u043d\u0435\u0433\u043e \u0432\u0435\u0431-\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044e Chromium \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c URL-\u0430\u0434\u0440\u0435\u0441, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c. Sogou \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0441\u0445\u0435\u043c\u0443 \u0438\u043b\u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 URL-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\u041d\u0430 \u0442\u0440\u0435\u0442\u044c\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u043c \u0434\u0432\u0438\u0436\u043a\u0435 Chromium 80 \u043e\u0442 Sogou. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u0435\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b \u0438 \u0441 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0432\u0430\u0436\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0437\u0430\u0449\u0438\u0442\u044b, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 GrayRabbit.\n\n\u0412 2024 \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Google\u00a0\u043e\u043f\u0438\u0441\u0430\u043b\u0438 GrayRabbit\u00a0\u043a\u0430\u043a \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u043e\u0435 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0438 \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u0435\u0433\u043e \u0441 UNC3569, \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043a\u0430\u043a \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438, \u0442\u0430\u043a \u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u043d\u0430\u0439\u043c\u0443.\n\n\u041e\u0431\u0440\u0430\u0437\u0435\u0446 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Gen Threat Labs, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u043e\u043b\u0435\u0435 \u0437\u0440\u0435\u043b\u044b\u0439 64-\u0431\u0438\u0442\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u043c \u043d\u0430\u0431\u043e\u0440\u043e\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 C2, \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e RC4.\n\n\u0415\u0433\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0445 \u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a, \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432, \u0441\u0431\u043e\u0440 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0444\u043b\u0435\u043a\u0441\u0438\u0432\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0445\u043e\u0441\u0442\u0430.\n\nGen Threat Labs \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0441\u0432\u043e\u0438\u043c\u0438 \u0432\u044b\u0432\u043e\u0434\u0430\u043c\u0438 \u0441 Tencent 9 \u0430\u043f\u0440\u0435\u043b\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Sogou Input Method 16.3.0.3498 \u043e\u0442 21 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u041f\u0430\u0442\u0447 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b URL, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u043c\u044b\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e HTTPS \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u044e \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 Sogou \u0438 Tencent.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u0441\u0442\u0430\u0440\u0435\u043b \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0431\u0435\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b.", "creation_timestamp": "2026-09-15T00:00:08.418561Z"}, {"uuid": "6fecef12-a462-4053-8789-2704a517e439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/BleepingComputer/25549", "content": "\u200aHackers exploit Tencent app flaw to deploy GrayRabbit malware\n\nThreat actors linked to a China-aligned espionage group are exploiting a critical vulnerability (CVE-2026-51990) in Tencent's Sogou Input Method for Windows to deploy the GrayRabbit backdoor. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/", "creation_timestamp": "2026-09-15T00:00:10.129471Z"}, {"uuid": "34247ce8-c13e-4d53-83ba-a4e8ea49dcfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://t.me/HackerNewscyber/3457", "content": "\u2708 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Sogou \u0628\u0631\u0627\u06cc \u0627\u0646\u062a\u0634\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit\n\n\u00a9\ufe0f \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0646\u062a\u0633\u0628 \u0628\u0647 \u06af\u0631\u0648\u0647 \u0647\u0645\u0633\u0648 \u0628\u0627 \u0686\u06cc\u0646 UNC3569 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-51990 \u062f\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 Sogou Input Method \u0634\u0631\u06a9\u062a Tencent \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u0631\u0627 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u0645\u0633\u062a\u0642\u0631 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.\n\n\u00a9\ufe0f \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u06a9 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062d\u0645\u0644\u0647 \u0628\u0627 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 \u06cc\u06a9 \u0644\u06cc\u0646\u06a9 \u0645\u062e\u0631\u0628 \u0622\u063a\u0627\u0632 \u0634\u062f\u0647 \u0648 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062a\u0632\u0631\u06cc\u0642 \u0641\u0631\u0645\u0627\u0646\u060c \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc Sogou \u0648 \u06cc\u06a9 \u0646\u0633\u062e\u0647 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0628\u062f\u0648\u0646 sandbox \u0627\u0632 Chromium\u060c \u06a9\u062f \u0645\u062e\u0631\u0628 \u0631\u0627 \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\n\u00a9\ufe0f \u0628\u062f\u0627\u0641\u0632\u0627\u0631 GrayRabbit \u06cc\u06a9 \u0628\u06a9\u200c\u062f\u0648\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u062c\u0631\u0627\u06cc \u0641\u0631\u0627\u06cc\u0646\u062f\u0647\u0627\u060c \u0627\u06cc\u062c\u0627\u062f \u067e\u0648\u0633\u062a\u0647 \u0645\u0639\u06a9\u0648\u0633\u060c \u0633\u0631\u0642\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062c\u0645\u0639\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0633\u06cc\u0633\u062a\u0645 \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u062f\u0627\u0631\u062f.\n\n\u00a9\ufe0f \u062f\u0631 \u0627\u062f\u0627\u0645\u0647: Tencent \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u062f\u0631 \u0646\u0633\u062e\u0647 16.3.0.3498 \u062f\u0631 \u0622\u0648\u0631\u06cc\u0644 \u06f2\u06f0\u06f2\u06f6 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u061b \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u0627\u0646 \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u0648\u062a\u0648\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u062f\u0627\u062e\u0644\u06cc \u0647\u0645\u0686\u0646\u0627\u0646 \u0642\u062f\u06cc\u0645\u06cc \u0648 \u0641\u0627\u0642\u062f sandbox \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062e\u0637\u0631\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u06cc\u06af\u0631\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.\n\n\ud83c\udf10 @HackerNewsCyber", "creation_timestamp": "2026-09-15T00:00:27.506613Z"}, {"uuid": "08bfa8f7-4380-473f-a9d8-0473a7168a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvjz7klh3o2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-20079: 22 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-85706: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 5 interactions\nCVE-2026-76461: 5 interactions\nCVE-2026-85706: 5 interactions\n", "creation_timestamp": "2026-09-15T06:38:06.953080Z"}, {"uuid": "7876d3d6-e890-4aa9-afa0-d10d82bd51b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-51990", "type": "seen", "source": "https://bsky.app/profile/jarkafterdark.com/post/3mvk37wpdgo2m", "content": "the flaw, cve-2026-51990, opened the path to remote code execution through sogou's embedded browser. in the attack gen observed, UNC3569 chained it with an old chromium v8 flaw. one crafted link, one click, and the attacker could essentially do anything the currently logged-in user could do.", "creation_timestamp": "2026-09-15T07:14:06.573695Z"}, {"uuid": "60c17918-7d5d-42c6-84be-62dc3e7dfd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mvk6n5uc7cym", "content": "\u4e2d\u56fd\u7cfb\u30a2\u30af\u30bf\u30fc\u304cTencent\u88fd\u30bd\u30d5\u30c8\u306e\u91cd\u5927\u306a\u6b20\u9665\u3092\u60aa\u7528\u3057\u3001\u30d0\u30c3\u30af\u30c9\u30a2\u300cGrayRabbit\u300d\u3092\u5c55\u958b\uff08CVE-2026-51990\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47725/", "creation_timestamp": "2026-09-15T08:15:12.790640Z"}, {"uuid": "df6926d4-424b-4b3d-837d-838a0278a4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mvkl7uotq72g", "content": "China-aligned hackers exploiting critical Tencent flaw to drop GrayRabbit backdoor. CVE-2026-51990 poses immediate risk to Windows users\u2014SOC\u2026\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-tencent-app-flaw-to-deploy-grayrabbit-malware/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-09-15T12:00:24.468935Z"}, {"uuid": "9a7c389c-f0ea-41c9-a039-4c0d2f4c0b6c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/56d705b6-7c8b-4c3b-87dd-67b77e9b4a9a", "content": "", "creation_timestamp": "2026-09-15T14:00:40.145937Z"}, {"uuid": "282650a1-dda9-4338-bb8b-1c4ed658d2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-51990", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvl4puma3w2l", "content": "A critical flaw (CVE-2026-51990) in Tencent's popular Sogou Input Method is being exploited by Chinese hackers for 1-click RCE. The attack chains a custom protocol handler flaw with an old browser engine. #CyberSecurity #Vulnerability #Tencent\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-15T17:13:35.172708Z"}]}