#wintervivern — Public Fediverse posts

Webmailer #Roundcube: Attacken auf Zero-Day-Lücke | Security https://www.heise.de/news/Webmailer-Roundcube-Attacken-auf-Zero-Day-Luecke-9343924.html #Exploit #Patchday #CyberCrime #CrossSiteScripting #XSS #APT28 #WinterVivern #Sednit #Russland #Russia #Belarus #Weissrussland #Hacking

Pro-Russia hackers target inboxes with 0-day in webmail app used by millions
"Previously unknown #XSS in #Roundcube let #WinterVivern steal government emails."
@arstechnica
https://arstechnica.com/security/2023/10/pro-russia-hackers-target-inboxes-with-0-day-in-webmail-app-used-by-millions/

Pro-Russia hackers target inboxes with 0-day in webmail app used by millions - Enlarge (credit: Getty Images)

A relentless team of pro-Russia... - https://arstechnica.com/?p=1978806 #wintervivern #roundcube #security #zero-day #biz⁢ #xss

The attack chains orchestrated by Winter Vivid begin with a phishing message that includes a Base64-encoded payload in HTML source code.

#Cybersecurity #HackerGroup #Vulnerability #APT #WinterVivern

https://cybersec84.wordpress.com/2023/10/25/winter-vivern-apt-group-exploiting-zero-day-vulnerability-in-roundcube-email-client/

A hacking group known as Winter Vivern is exploiting a zero-day vulnerability in Roundcube Webmail software to attack governments across Europe

Roundcube patched CVE-2023-5631 on October 14

#Roundcube #WinterVivern #Russia

https://therecord.media/winter-vivern-hackers-roundcube-webmail-zero-day

It may be summer, but #WinterVivern is spotted abusing Zimbra bugs to breach government email systems. Read more from The Register here: https://www.theregister.com/2023/07/17/patch_zimbra_alert/