#laundrybear — Public Fediverse posts on home.social

2026-08-02

Russische Akteure greifen über #OutlookWebAccess -Lücke an | Security https://www.heise.de/news/Russische-Akteure-greifen-ueber-Outlook-Web-Access-Luecke-an-11387751.html #OWA #Microsoft #Datenschutz #privacy #TA488 #LaundryBear #VoidBlizzard #Russland 🇷🇺 #Russia 🇷🇺 #exploit #Patchday #OWAReaper #JS #JavaScript #XSS #CrossSiteScripting

#outlookwebaccess #owa #microsoft #datenschutz #privacy #ta488

The New Oil @[email protected]

2026-07-30

Russian hackers exploit #ExchangeOWA zero-day for long-term mailbox access

https://www.bleepingcomputer.com/news/security/russian-hackers-exploit-exchange-owa-zero-day-for-long-term-mailbox-access/

#Russia #LaundryBear #VoidBlizzard #Exchange #Microsoft #MicrosoftExchange #OWA #cyberscurity

#exchangeowa #russia #laundrybear #voidblizzard #exchange #microsoft

Analyst207 @[email protected]

2026-07-30

Russian Spies Expand Email Attacks to Outlook

Russian spies have set their sights on Microsoft Outlook Web Access, exploiting a cross-site scripting flaw to launch targeted email attacks, just days after being called out for their abuse of a zero-day vulnerability in Zimbra Collaboration Suite. The notorious group, tracked as TA488 or Laundry Bear, has adapted their sneaky half-click technique to…

https://osintsights.com/russian-spies-expand-email-attacks-to-outlook?utm_source=mastodon&utm_medium=social

#RussianEspionage #Ta488 #LaundryBear #Cve202642897 #OutlookWebAccess

#russianespionage #ta488 #laundrybear #cve202642897 #outlookwebaccess

Analyst207 @[email protected]

2026-07-30

Russian Hackers Exploit Microsoft OWA Flaw to Maintain Mailbox Access

Russian hackers have found a sneaky way to keep access to Microsoft mailboxes by exploiting a flaw in Outlook Web Access, making it tough to shake them off even with a full system overhaul. Simply put, these cyber intruders can stick around unless their presence is manually erased from the Exchange server.

https://osintsights.com/russian-hackers-exploit-microsoft-owa-flaw-to-maintain-mailbox-access?utm_source=mastodon&utm_medium=social

#RussianHackers #MicrosoftOwa #Cve202642897 #LaundryBear #Ta488

#russianhackers #microsoftowa #cve202642897 #laundrybear #ta488

Analyst207 @[email protected]

2026-07-29

Russian Hackers Exploit Exchange Zero-Day for Long-Term Mailbox Access

Russian hackers have unleashed a powerful tool, dubbed OWAReaper, exploiting a zero-day flaw in Exchange Outlook Web Access to gain long-term access to mailboxes, with Proofpoint hailing it as the most sophisticated backdoor delivered via half-click exploits they've ever seen. The attack, linked to the Russian state-sponsored…

https://osintsights.com/russian-hackers-exploit-exchange-zero-day-for-long-term-mailbox-access?utm_source=mastodon&utm_medium=social

#RussianHackers #LaundryBear #ExchangeZeroDay #Cve202642897 #Owareaper

#russianhackers #laundrybear #exchangezeroday #cve202642897 #owareaper

Marcel SIneM(S)US @[email protected]

2026-07-26

Russische Angreifer missbrauchen #ZeroClick-Lücke in #Zimbra | Security https://www.heise.de/news/Russische-Angreifer-missbrauchen-Zero-Click-Luecke-in-Zimbra-11376873.html #LaundryBear #VoidBlizzard #CLSTA1114 #TA488 #UNK_PitStop #CyberCrime #Patchday

#zeroclick #zimbra #laundrybear #voidblizzard #clsta1114 #ta488

Analyst207 @[email protected]

2026-07-23

Kremlin Hackers Exploit Zimbra Bug to Infiltrate Networks

Kremlin hackers, also known as Laundry Bear, have been exploiting a vulnerability in the Zimbra Collaboration Suite to secretly infiltrate government and commercial networks for over a year, aiming to gather sensitive information for the Russian Federation. They've been using malicious emails to inject JavaScript code, allowing them to covertly acquire…

https://osintsights.com/kremlin-hackers-exploit-zimbra-bug-to-infiltrate-networks?utm_source=mastodon&utm_medium=social

#LaundryBear #Russia #Cve202566376 #Zimbra #NationState

#laundrybear #russia #cve202566376 #zimbra #nationstate

Analyst207 @[email protected]

2026-07-23

Russian Hackers Exploit Zimbra Flaw for Widespread Email Theft

Russian hackers have exploited a Zimbra flaw, CVE-2025-66376, to steal emails from targeted organizations, allowing them to automatically collect a victim's last 90 days of email without requiring any interaction. This alarming vulnerability was weaponized by the Russian state-sponsored group Laundry Bear using a combination of phishing and…

https://osintsights.com/russian-hackers-exploit-zimbra-flaw-for-widespread-email-theft?utm_source=mastodon&utm_medium=social

#RussianHackers #LaundryBear #VoidBlizzard #Zimbra #Cve202566376

#russianhackers #laundrybear #voidblizzard #zimbra #cve202566376

Analyst207 @[email protected]

2026-07-23

Russian Hackers Exploit Zero-Click Attack on Western Organizations

Russian hackers have launched a stealthy zero-click attack, dubbed "beehive," targeting Western organizations by exploiting a vulnerability in the Zimbra Collaboration Suite, allowing them to siphon off sensitive emails and data with just a viewed email. This alarming threat highlights the need for organizations to bolster…

https://osintsights.com/russian-hackers-exploit-zero-click-attack-on-western-organizations?utm_source=mastodon&utm_medium=social

#ZeroClickAttack #Cve202566376 #ZimbraCollaborationSuite #LaundryBear #Russia

#zeroclickattack #cve202566376 #zimbracollaborationsuite #laundrybear #russia

Analyst207 @[email protected]

2026-06-11

Russian national charged in Void Blizzard cyber-espionage scheme

A Russian national, Denis Nikolayevich Obrezko, has been charged with helping facilitate a massive cyber-espionage scheme that infiltrated at least 11 US companies, with authorities suspecting many more victims nationwide. Obrezko allegedly played a key role in the Void Blizzard campaign by buying a virtual private server and registering…

https://osintsights.com/russian-national-charged-in-void-blizzard-cyber-espionage-scheme?utm_source=mastodon&utm_medium=social

#CyberEspionage #VoidBlizzard #LaundryBear #Russia #NationState