RUSSIAN HACKERS EXPLOIT ZIMBRA EMAIL FLAW

The hacking group, also tracked as Void Blizzard, is leveraging a zero-click flaw in Zimbra to steal emails from targeted organizations. The vulnerability has already been patched, but attackers are actively exploiting unpatched systems. Laundry Bear is coupling the technical exploit with phishing emails to increase success rates. This multi-vector approach allows the group to compromise email accounts even when initial phishing attempts fail. Zimbra Collaboration is widely used by enterprises and government agencies, making it an attractive target for state-sponsored actors seeking intelligence and sensitive communications. CISA recommends organizations using Zimbra immediately apply available patches and review email logs for signs of compromise. Users should also remain vigilant against phishing attempts targeting their email credentials. This campaign underscores the continued threat posed by Russian cyber operations targeting critical infrastructure and sensitive organizational data.