DevThe Registerabout 3 hours ago
Russian spies target Outlook with half-click attack
3 min read
Russian espionage group TA488 (Laundry Bear) now exploits CVE-2026-42897, a cross-site scripting flaw in Outlook Web Access, to deploy the OWAReaper browser implant. Opening a booby-trapped message executes attacker-controlled JavaScript inside the victim's authenticated mail session. Exchange Online is not affected.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
