The zero-day vulnerability in question is CVE-2025-10585 , which has been described as a type confusion issue in the V8 JavaScript and ... infector and downloader code in this campaign appears to be ...