Nation-State Hackers Target Zero-Day Vulnerability in Roundcube Webmail Software
On October 11, 2023, the threat actor group known as Winter Vivern was detected exploiting a zero-day vulnerability in Roundcube webmail software, allowing them to harvest sensitive email messages from targeted accounts. According to ESET security researcher Matthieu Faou, the group has elevated its offensive by leveraging a newly discovered…