Tag: browser-stealer

1 Attack Reports | 0 Vulnerabilities

Attack reports

Operation GhostMail: Russian APT Exploits Zimbra XSS to Target Ukraine Government

A sophisticated phishing campaign targeting a Ukrainian government agency exploits a cross-site scripting vulnerability in Zimbra Collaboration Suite. The attack, attributed to a Russian APT group, uses a seemingly innocuous internship inquiry email to deliver a malicious JavaScript payload. When o…
phishing
russia
ukraine
exfiltration
government
xss
webmail
spypress.zimbra
CVE-2025-66376
2026-03-17
browser-stealer
soap api
zimbra
Published: March 17, 2026
Linked vulnerabilities : CVE-2025-66376 (CVSS 7.2)
Downloadable IOCs: 0
Click here to see more Attack Reports