Threat actor
JungleBamboo
Tracked by CyberSIXT since 10 Sep · RSS
3Articles, all time
0Articles, last 30 days
3CVEs exploited, attributed · all time
0Research reports, all time
Activity
Quiet for 6 weekslast report 15 Sep4 articles3 outlets
Three articles so far, 10 Sep to 15 Sep.
- Tue 15 Sep. Security Affairs. China-Linked Groups Exploited Chrome Patch Gap to Target NGOs. Cites a CVE in CISA KEV.
- Sat 12 Sep. SecurityWeek. Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge. Cites a CVE in CISA KEV.
- Thu 10 Sep. SecurityOnline. Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived. Cites a CVE in CISA KEV.
- Thu 10 Sep. Security Affairs. Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns. Cites a CVE in CISA KEV.
- Known exploited CVE
- Article naming JungleBamboo
- Articles a day, all coverage
- Quiet time, folded
Drawn: the latest 4 of 3 articles.
Show as tableHide table
| Date | Type | Source | Title |
|---|---|---|---|
| 15 Sep | Article | Security Affairs | China-Linked Groups Exploited Chrome Patch Gap to Target NGOs |
| 12 Sep | Article | SecurityWeek | Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage Surge |
| 10 Sep | Article | SecurityOnline | Chrome Zero Day Chain Targeted NGOs Before Google’s Patch Arrived |
| 10 Sep | Article | Security Affairs | Chrome and Windows Zero Days Fuel BlueMoon Espionage Campaigns |
Connections
3 exploited CVEs. What the record links this actor to; hover or use the arrow keys.
In CISA KEV
Show as a listHide the list
- Exploited CVEs
- CVE-2026-87491, CVE-2026-85880, CVE-2026-85046
- Related actor
- APT31
CVEs exploited3
CVEs an article attributes to JungleBamboo, most covered first
- CVE-2026-85046Exploited
Google Chromium V8 Type Confusion Vulnerability
8.8High1.8% EPSS · 23 articles - CVE-2026-85880Exploited
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
7.8High0.4% EPSS · 22 articles - CVE-2026-87491Exploited
Google Chromium V8 Out of Bounds Write Vulnerability
Not scored3.5% EPSS · 11 articles
MITRE ATT&CK techniques
No MITRE ATT&CK® techniques are recorded for JungleBamboo.
Articles3
Drawn: the latest 4 of 3 articles.
- China-Linked Groups Exploited Chrome Patch Gap to Target NGOsSecurity AffairsExploitedCVE-2026-85046
- Chrome Zero Days Fuel BlueMoon Exploit Kit’s Espionage SurgeSecurityWeekExploitedCVE-2026-85046
- Chrome Zero Day Chain Targeted NGOs Before Google’s Patch ArrivedSecurityOnlineExploitedCVE-2026-85046
- Chrome and Windows Zero Days Fuel BlueMoon Espionage CampaignsSecurity AffairsExploitedCVE-2026-85046