NATO and Diplomats’ Email Portals Targeted by Russian APT Winter Vivern

Winter Vivern (aka TA473), a Russian hacking group, has been exploiting vulnerabilities (CVE-2022-27926) in unpatched Zimbra instances to access the emails of NATO officials, governments, military people, and diplomats. The CVE-2022-27926 flaw affects versions 9.0.0 of Zimbra Collaboration, which is used to host webmail portals with public access. The attackers can also exploit compromised accounts […]

The post NATO and Diplomats’ Email Portals Targeted by Russian APT Winter Vivern appeared first on Heimdal Security Blog.