CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails

Multiple high-impact incidents and active campaigns were reported: a CERT‑UA impersonation phishing campaign (UAC‑0255) distributed AGEWHEEZE via password‑protected ZIPs to roughly 1 million emails; WhatsApp‑delivered VBS malware using a UAC bypass has been observed for multi‑stage remote access; Google patched a Chrome zero‑day (CVE‑2026‑5281) exploited in the wild; the Axios npm package was compromised in a supply‑chain attack attributed to UNC1069, delivering a cross‑platform RAT; TrueConf’s zero‑day (CVE‑2026‑3502) has been exploited against Southeast Asian government networks; a Vertex AI