#RoundcubeVulnerability

Russian Cyberspies Exploit Roundcube Flaws Against European Governments

by

February 19, 2024 at 08:03AM Recorded Future alerts about Winter Vivern, a Russian cyberespionage group, exploiting Roundcube webmail servers to target European government and military entities. The group also attacked infrastructure in Europe and Central Asia, aligned with Russian and Belarusian interests. Social engineering and XSS vulnerabilities are being used to gain access for intelligence … Read more

Russian Hackers Caught Exploiting Roundcube Webmail Zero-Day

by

October 25, 2023 at 12:16PM Winter Vivern, a Russia-linked advanced persistent threat (APT) actor, has been exploiting a zero-day vulnerability in the Roundcube webmail server to target government entities and a think tank in Europe. Winter Vivern, also known as TA473, focuses on espionage and has previously targeted NATO countries. It has been targeting email … Read more