MEDIUMApt
Global

Russian Espionage Hackers Hit Zimbra With Half-Click Attacks

·Source: Bank Info Security

Updated:

Executive Summary

Viewing Malicious Email in Vulnerable Webmail Client Triggers Data-Stealing Attack Russian cyberespionage hackers are targeting a vulnerability in Zimbra Collaboration Suite - a patch is available - that enables them t

Analysis

Viewing Malicious Email in Vulnerable Webmail Client Triggers Data-Stealing Attack Russian cyberespionage hackers are targeting a vulnerability in Zimbra Collaboration Suite - a patch is available - that enables them to execute a malicious, data- and email-stealing script simply if a user of a vulnerable client opens their email, warn Western cybersecurity agencies.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/russian-espionage-hackers-hit-zimbra-half-click-attacks-image_small-7-a-32322.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Jul 24, 2026.

Related Threats

MEDIUMApt

Mirage Kitten targets Middle East and Africa region with new malware

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.

Securelist (Kaspersky)
LOWApt

Hackers are compromising hotel Wi-Fi gateways to hijack Microsoft 365 accounts

Traveling enterprise employees beware: Think twice before you log onto that oh-so-convenient public Wi-Fi. Since at least June, threat actors have been compromising “captive” Wi-Fi gateways and other portal appliances at hotels, conference centers, and similar shared venues to hijack users’ Microsoft 365 accounts, according to the ReliaQuest Threat Research team. Once a threat actor controls a gat

CSO Online
MEDIUMApt

Google’s solution to hacker name confusion? Yet another naming system

APT-number conventions are out, cryptonyms are in, and security teams now have one more naming system to keep straight. The post Google’s solution to hacker name confusion? Yet another naming system appeared first on CyberScoop .

CyberScoop