Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials
October 20, 2024 at 04:48AM Unknown threat actors exploited a patched vulnerability in Roundcube webmail to execute phishing attacks aimed at stealing user credentials. Discovered by Positive Technologies, the attack involved sending a deceptive email containing JavaScript code, targeting specific government organizations. Roundcube has since resolved the issue, but the potential for significant damage remains. … Read more