TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks A high-severity flaw (CVE-2026-3502) in TrueConf's Windows client updater was exploited in the wild to distribute tampered updates and execute arbitrary code across connected endpoints. The TrueChaos campaign, linked to a Chinese-nexus threat actor, weaponized the bug to deploy DLL side-loading implants and likely the Havoc C2 framework against government targets...

A zero-day vulnerability CVE-2026-3502 in TrueConf’s Windows updater enabled attackers to push malicious updates, deploying DLL side-loading implants and Havoc C2 in Southeast Asian government networks. #TrueChaos #Havoc #Vietnam