A Russia-linked risk actor has been attributed to a cyber espionage operation focusing on webmail servers comparable to Roundcube, Horde, MDaemon, and Zimbra through cross-site scripting (XSS) vulnerabilities, together with a then-zero-day in MDaemon, in line with new findings from ESET.
The exercise, which commenced in 2023, has been codenamed Operation RoundPress by the Slovak cybersecurity firm. It has
Russia-Linked APT28 Exploited MDaemon Zero-Day to Hack Authorities Webmail Servers
