webmail news
2 stories
roundcubehigh
MassTraction Exploits Roundcube Flaws at US, Canadian Universities
A threat group identified as UNK_MassTraction, suspected of operating on behalf of China, has been observed exploiting vulnerabilities within the Roundcube webmail application. The primary targets of these attacks are research mail servers located at academic institutions in both the United States and Canada. The group's reported method involves the theft of user sessions to achieve…
CVE-2024-42009high
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
A new cyberattack campaign has been detected, specifically targeting academic institutions in North America. The perpetrators of this campaign are suspected to be aligned with China and are leveraging security weaknesses in the Roundcube webmail system. The attacks appear to be concentrated on physics and engineering departments within these universities.