A recently resolved security vulnerability in Google Chrome was leveraged as a zero-day by an adversary identified as TaxOff to introduce a backdoor named Trinper.
The assault, noted in mid-March 2025 by Positive Technologies, utilized a sandbox evasion weakness cataloged as CVE-2025-2783 (CVSS rating: 8.3).
Google rectified the issue later that same month following Kaspersky’s report of it being actively exploited.