SpyPress: JavaScript Malware Used in Operation RoundPress
SpyPress is an obfuscated JavaScript-based malware used by TA458 in Operation RoundPress. It targets webmail platforms including Roundcube, Zimbra, Kerio, SOGo, and…
Tag: webmail
TA458: Russian Military Intelligence Operation Targeting Webmail
TA458 is a threat actor tracked by Proofpoint, likely a Russian military intelligence operation. It conducts Operation RoundPress using half-click XSS exploits…
CVE-2025-49113: Roundcube Webmail Vulnerability Exploited for RelayShell
CVE-2025-49113 is a vulnerability in Roundcube webmail servers that was exploited by the Lazarus Group to install a previously undocumented PHP web…