Russia-Linked Group Targets Zimbra Webmail With Zero-Click Attacks
The U.S. and allied nations warn that a Kremlin-backed group known as Laundry Bear is breaking into Zimbra email accounts by pairing phishing with a now-patched flaw.
AfroEuropa Newsroom
AfroEuropa desk
A Russian state-sponsored hacking group has been breaking into Zimbra webmail accounts by combining phishing with the exploitation of a software vulnerability, according to warnings issued by the United States and several other nations.
An international alert identifies the group as Laundry Bear, which BleepingComputer reports is also tracked under the name Void Blizzard. The Record, citing the U.S. and other governments, said the group has employed a zero-click phishing technique to compromise Zimbra webmail accounts in different parts of the world.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is among the agencies raising the alarm, according to BleepingComputer. The campaign focuses on organizations running Zimbra Collaboration email servers, blending phishing activity with the exploitation of a Zimbra vulnerability that has since been patched.
Keep reading
Two Scattered Spider Members Jailed Over 2024 Transport for London Hack
Two members of the Scattered Spider cybercrime group were each sentenced to five and a half years in prison for the 2024 cyberattack on Transport for London.
One newsletter, two continents
The Bridge brings you the tech, startups, and leaders moving between Africa and Europe — one sharp email each morning. No spam, unsubscribe anytime.
