CVE-2026-120422
SlippyNunchucks Exploits Sogou Input Method (CVE-2026-120422) in DNS Hijacking Campaign
Vendor / product: Tencent Sogou Input Method
Event date: 2026-07-01
Public PoC: Yes
First tracked by RiskWire: 2026-11-05
Named threat actors
SlippyNunchucks
Sources & citations (3)
- SlippyNunchucks Exploits Sogou DNS Hijacking to Deploy DarkVigil Surveillance Malware mallory.ai · 2026-11-04
- China-aligned SlippyNunchucks threat group hijacks language app to distribute malware abroad, ESET Research discovers markets.businessinsider.com · 2026-11-04
- China-aligned SlippyNunchucks threat group hijacks language app to distribute malware abroad, ... enidnews.com · 2026-11-04
References
See CVE-2026-120422 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →