Chinese group exploits Sogou Input Method flaw to install backdoor

The China-linked group UNC3569 exploited a flaw in Sogou Input Method to install the GRAYRABBIT backdoor.

Published 11h2 sources✓ ConfirmedImportantupdated 5h

≈ 21sSpeed

The fact

The tool, used for typing Chinese characters on Windows, is widely used in China.

The attack started with a crafted link and ended with malware installation.

2 sources — click a link to read an article on the topic:

Explore this topic

Auto-synthesis from 2 media sources · identified on September 11, 2026