DevThe Registerabout 2 hours ago
Russian attacks infect users viewing email
3 min read
Russian group Laundry Bear has exploited Zimbra bug CVE-2025-66376 since July 2025, infecting targets just by viewing an email. The attacks steal 90 days of emails, passwords, and 2FA tokens, storing data on a VPS running the custom Flowerbed framework. 27 international agencies attribute the campaign to the Russian Federation.
Level
Hype check
Tap to vote and see what everyone thinks.
