Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Government Login Credentials

Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Government Login Credentials

Posted: October 21, 2024
Categories: Phishing, vulnerability
Tags: webmail security, phishing attack
Author: Npav Lab
Views: 54
A recently discovered phishing campaign is exploiting a stored cross-site scripting (XSS) vulnerability in the open-source Roundcube webmail software to steal login credentials. Threat actors are leveraging a now-patched flaw (CVE-2024-37383) via malicious emails, targeting government organizations in Commonwealth of Independent States (CIS) countries. The vulnerability, patched in May 2024, allowed attackers to execute JavaScript within victims' browsers, tricking them into revealing sensitive login information.
Read more