AI Summary

A Russian state-backed espionage group has been exploiting a previously unknown vulnerability in Zimbra's webmail client to gain unauthorized access to email accounts. The group's malicious payload targeted the last 90 days of email, the entire email directory, saved passwords, and two-factor authentication recovery codes. This suggests a comprehensive approach to compromising user accounts. The vulnerability was triggered simply by opening the malicious message, indicating a high level of sophistication in the group's tactics.

AI summaries can be wrong sometimes—always verify important details using the source article.