Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
State-sponsored actors weaponize zero-day flaws to bypass modern authentication and harvest sensitive communications.
A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra's webmail client. The payload goes after the last 90 days of email, the organization's entire email directory, the password saved in the browser and the codes ke...
The Hacker News
Source
Generated insight by OnAirToday AI
This sophisticated exploitation highlights the critical vulnerability of browser-based email clients when facing state-sponsored persistence. It underscores a shift where attackers prioritize automated exfiltration of multi-factor authentication secrets to bypass traditional identity protections.
Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.