Threat Intelligence Report

Gen Blogs | Gray Rabbits and the Tale of a One-Click Backdoor

📅 September 11, 2026 📰 www.gendigital.com 🔍 2 CVE(s) referenced

A critical, one-click remote code execution vulnerability in Sogou Input Method allowed attackers to exploit an outdated, unsandboxed browser component and deliver the GRAYRABBIT backdoor in active campaigns, highlighting severe supply chain risk for hundreds of millions of users before Tencent issued a patch.

unclassified

CVE-2026-51990, CVE-2021-38003

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle