TA488 Targets Zimbra Mailservers with Half-Click Exploits
MentionsZimbraProofpoint
Proofpoint is releasing this report in coordination with NSA and FBI’s JSAC reporting about TA488/Void Blizzard, which can be found here. This is part 1 of a 2-part blog series Proofpoint is publishing about Russian espionage actors using half-click exploits to target government webmail servers. Read part 2 about TA458 here. Threat Research would like to thank the Proofpoint Cloudmark Authority team.
Summary from Proofpoint Threat Insight.
Explained
The technology and terms in this story. Learn more
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.