Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…
Tag: ZimReaper
ZimReaper: JavaScript Malware Targeting Zimbra Mail Servers
ZimReaper is a malicious JavaScript delivered via a half-click exploit (CVE-2025-66376) by the Laundry Bear threat actor. It harvests email communications and…
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-sponsored espionage group exploited a zero-day vulnerability in Zimbra's webmail client to steal emails, passwords, and two-factor authentication recovery codes…
CVE-2025-66376: Half-Click Exploit in Zimbra Mail Servers
CVE-2025-66376 is a vulnerability in Zimbra mail servers exploited by Laundry Bear to deliver ZimReaper malware via a view-based exploit requiring only…