#roundcube

Proofpoint ties TA488 and TA458 to half-click exploits and webmail zero-days that steal email from Ukrainian, NATO and US government mailservers. #HalfClickExploit #Zimbra #Roundcube #APT #Proofpoint https://securityonline.info/half-click-exploits-webmail/?utm_source=mastodon&utm_medium=jetpack_social

UNK_MassTraction, a suspected China-aligned actor, exploits Roundcube webmail flaws to steal credentials and deploy the VShell backdoor at universities. #UNKMassTraction #Roundcube #VShell #CyberEspionage #Proofpoint #InfoSec http://securityonline.info/unk-masstraction-roundcube-vshell/?utm_source=mastodon&utm_medium=jetpack_social

China-linked UNK_MassTraction exploits two critical Roundcube CVEs to breach university physics departments via phishing emails and web shells. #UNKMassTraction #Roundcube #ChinaAPT #UniversityCyberAttack #IceCube https://meterpreter.org/unk-masstraction-roundcube-university/?utm_source=mastodon&utm_medium=jetpack_social

China-Linked Hackers Exploit Critical Roundcube Bugs 🔗 https://cybersecurefox.com/en/roundcube-critical-cve-2024-42009-cve-2025-49113-attacks #roundcube #vulnerabilities #cve-2024-42009 #cve-2025-49113 #unk #masstraction #icecube #payload