Russian hacking group seen exploiting Roundcube webmail zero-day

Winter Vivern group targets European governments and think tanks

clock • 2 min read
Russian hacking group seen exploiting Roundcube webmail zero-day
Image:

Russian hacking group seen exploiting Roundcube webmail zero-day

ESET researchers have revealed that the Winter Vivern Russian hacking group has exploited a zero-day vulnerability in Roundcube Webmail, targeting various European government entities and think tanks.

This exploitation, which is thought to have begun on 11th October, continued until the security flaw, dubbed CVE-2023-5631, was addressed by the Roundcube development team on 16th October, followin...

To continue reading this article...

Join Computing

  • Unlimited access to real-time news, analysis and opinion from the technology industry
  • Receive important and breaking news in our daily newsletter
  • Be the first to hear about our events and awards programmes
  • Join live member only interviews with IT leaders at the ‘IT Lounge’; your chance to ask your burning tech questions and have them answered
  • Access to the Computing Delta hub providing market intelligence and research
  • Receive our members-only newsletter with exclusive opinion pieces from senior IT Leaders

Join now

 

Already a Computing member?

Login

You may also like
Global government networks breached in 'ArcaneDoor' espionage campaign

Hacking

Threat actors compromised networks using Cisco zero-day exploits

clock 26 April 2024 • 2 min read
CISA issues emergency order on Microsoft breach by Russian hackers

Threats and Risks

Affected bodies must take immediate action, agency says

clock 12 April 2024 • 2 min read
Multiple China-linked groups attacking Ivanti vulnerabilities

Threats and Risks

Patches have been made available by Ivanti

clock 08 April 2024 • 2 min read

Sign up to our newsletter

The best news, stories, features and photos from the day in one perfectly formed email.

More on Threats and Risks

Microsoft May Patch Tuesday fixes two actively exploited zero days

Microsoft May Patch Tuesday fixes two actively exploited zero days

Microsoft has fixed 60 Windows CVEs in its May Patch Tuesday update, two of which are actively exploited zero days. One is a critical vulnerability, earning an 8.8 CVSS rating.

John Leonard
clock 15 May 2024 • 3 min read
NCSC and insurers unite to fight ransomware threat

NCSC and insurers unite to fight ransomware threat

First rule: 'Don't panic'

clock 15 May 2024 • 3 min read
Russian network found using genAI to spread disinformation

Russian network found using genAI to spread disinformation

CopyCop aims to fuel discord and weaken support for Ukraine

clock 10 May 2024 • 2 min read