Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software

The threat actor known as Winter Vivern has been observed exploiting a zero-day flaw in Roundcube webmail software on October 11, 2023, to harvest email messages from victims' accounts.
"Winter Vivern has stepped up its operations by using a zero-day vulnerability in Roundcube," ESET security researcher Matthieu Faou said in a new report published today. Previously, it was using known

accounts actor email eset exploiting flaw hackers harvest messages nation nation state october operations researcher roundcube roundcube webmail security security researcher software state threat threat actor vulnerability webmail winter winter vivern zero-day zero-day flaw zero-day vulnerability