unit42.paloaltonetworks.com· Jul 23, 2026· by Unit 42

Russian Global Webmail Espionage

Open Original Article ↗
Unit 42 details a Russian cyberespionage campaign targeting Zimbra webmail servers using JavaScript injection to steal credentials. The post Russian Global Webmail Espionage appeared first on Unit 42.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Cybercrime#Threat Research#CL-STA-1114#JavaScript#javascript injection#Nation-state#obfuscation#phishing