Winter Vivern APT Targets Zero Day in Roundcube

A relatively new attack group that has targeted European and Asian government organizations for several months has been exploiting a zero day XSS vulnerability in the open source Roundcube webmail server software in recent weeks.

The group is known as Winter Vivern, and researchers from several organizations have been tracking its activities since at least 2020. Many of the group’s targets have been government agencies, think tanks, and other government-connected organizations, and Winter Vivern has shown a propensity for …

apt attack exploiting government open source organizations researchers roundcube roundcube webmail server software tracking vulnerability webmail winter winter vivern xss