Russian Hackers Breached 80+ Organizations Using Roundcube XSS Flaw

The Russia-based threat group TAG-70 has been discovered to be exploiting Roundcube webmail servers with a recently disclosed Cross-Site Scripting vulnerability CVE-2023-5631. Their targets include government, military, and national infrastructure-related entities. This threat actor overlaps with Winter Vivern, TA473, and UAC-0114 threat group. However, this Roundcube targeting campaign has been conducted since October 2023, attacking […]

The post Russian Hackers Breached 80+ Organizations Using Roundcube XSS Flaw appeared first on Cyber Security News.

actor breached campaign cross-site cve cyber-attack cyber espionage cyber security entities exploiting flaw government hackers infrastructure military national national infrastructure organizations roundcube roundcube webmail russia russia-based russian russian hackers scripting servers ta473 tag tag-70 targeting threat threat actor threat group uac uac-0114 vulnerability webmail winter winter vivern xss xss flaw