Operation RoundPress
ID: e453430a-747a-56fe-b558-9e22730ba1d2
STIX ID: report--e453430a-747a-56fe-b558-9e22730ba1d2
Feed Name: WeLiveSecurity (ESET Research)
Threat Score
**Executive summary:** ESET Research details Operation RoundPress, a Sednit-linked espionage campaign that exploits XSS flaws in Roundcube, Horde, MDaemon (zero-day CVE-2024-11182), and Zimbra to inject SpyPress JavaScript payloads into webmail clients, enabling theft of credentials, emails, contacts, 2FA secrets, creation of app passwords and malicious Sieve rules; the report provides technical analysis, victimology, IoCs and ATT&CK mappings.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.