Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

A suspected China-aligned threat cluster tracked as UNK_MassTraction exploits patched Roundcube flaws CVE-2024-42009 and CVE-2025-49113 against U.S. and Canadian university physics and engineering departments. The campaign siphons credentials, deploys IceCube malware, and drops VShell or SquareShell web shells for persistent access.