#owareaper — Public Fediverse posts

📢 CVE-2026-42897 : TA488 exploite une XSS stockée dans Exchange OWA via l'implant OWAReaper

Cet article constitue une analyse technique approfondie de la vulnérabilité CVE-2026-42897 et de la campagne d'exploitation associée menée par le groupe TA488 (également connu sous les noms Void Blizzard et Laundry Bear), acteur étatique russe.

📖 cyberveille : https://cyberveille.ch/posts/2026-09-04-cve-2026-42897-ta488-exploite-une-xss-stockee-dans-exchange-owa-via-l-implant-owareaper/
🌐 source : https://www.resecurity.com/blog/article/inside-owareaper-how-cve-2026-42897-enables-persistent-exchange-mailbox-compromise
🟢 vérification factuelle haute
#ExchangeOWA #OWAReaper #Cyberveille

A mundane email triggered the stealthy TA488 OWAReaper Outlook exploit, granting hackers persistent inbox access without clicks.

#TA488 #OWAReaper #OutlookVulnerability #Cybersecurity #EmailThreat

https://meterpreter.org/ta488-owareaper-outlook-exploit/?utm_source=mastodon&utm_medium=jetpack_social

Russische Akteure greifen über #OutlookWebAccess -Lücke an | Security https://www.heise.de/news/Russische-Akteure-greifen-ueber-Outlook-Web-Access-Luecke-an-11387751.html #OWA #Microsoft #Datenschutz #privacy #TA488 #LaundryBear #VoidBlizzard #Russland 🇷🇺 #Russia 🇷🇺 #exploit #Patchday #OWAReaper #JS #JavaScript #XSS #CrossSiteScripting

Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit
#TA488 #CVE_2026_42897 #OWAReaper
https://www.proofpoint.com/us/blog/threat-insight/cleaning-out-inboxes-ta488-comes-outlook-another-half-click-exploit

Russian Hackers Exploit Exchange Zero-Day for Long-Term Mailbox Access

Russian hackers have unleashed a powerful tool, dubbed OWAReaper, exploiting a zero-day flaw in Exchange Outlook Web Access to gain long-term access to mailboxes, with Proofpoint hailing it as the most sophisticated backdoor delivered via half-click exploits they've ever seen. The attack, linked to the Russian state-sponsored…

https://osintsights.com/russian-hackers-exploit-exchange-zero-day-for-long-term-mailbox-access?utm_source=mastodon&utm_medium=social

#RussianHackers #LaundryBear #ExchangeZeroDay #Cve202642897 #Owareaper

A TA488 half-click exploit abuses CVE-2026-42897 in Outlook Web Access to drop OWAReaper, a stealthy implant that survives device reimaging.

#TA488 #OWAReaper #HalfClickExploit #CVE202642897 #OutlookWebAccess #InfoSec

https://securityonline.info/ta488-owareaper-owa-exploit/?utm_source=mastodon&utm_medium=jetpack_social