MEDIUMApt
Global

Russian Global Webmail Espionage

·Source: Unit 42 (Palo Alto)

Updated:

Executive Summary

Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credentials. The post Russian Global Webmail Espionage appeared first on Unit 42 .

Analysis

Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credentials. The post Russian Global Webmail Espionage appeared first on Unit 42 .
Source Attribution

Originally published by Unit 42 (Palo Alto) on Jul 23, 2026.

Related Threats

MEDIUMApt

Russian Espionage Hackers Hit Zimbra With Half-Click Attacks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/russian-espionage-hackers-hit-zimbra-half-click-attacks-image_small-7-a-32322.jpg" align=right hspace=4><b>Viewing Malicious Email in Vulnerable Webmail Client Triggers Data-Stealing Attack</b><br>Russian cyberespionage hackers are targeting a vulnerability in Zimbra Collaboration Suite - a patch is available - that enables them t

Bank Info Security
MEDIUMApt

Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors

Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a cyber espionage campaign

Infosecurity Magazine
LOWApt

Tycoon2FA takedown reshapes the phishing landscape

Traditional phishing techniques are in decline as a result of the disruption of the Tycoon2FA phishing-as-a-service (PHaaS) platform , Microsoft said in a new report, “Email threat landscape: Q2 2026 trends and insights”. “Phishing volume linked to the platform fell 92% from pre-disruption averages, including QR code phishing and CAPTCHA-gated phishing both declining from their March highs,” the c

CSO Online