Russian 'Laundry Bear' Can Hijack Zimbra Accounts Just by Viewing Emails... US Authorities Issue Warning

Russian hackers can hijack accounts simply by opening an email. The U.S. Cybersecurity and Infrastructure Security Agency (CISA), along with the National Security Agency (NSA) and the FBI, issued this warning on August 7.

Organizations using the 'Zimbra Collaboration Suite'—a collaborative email platform lacking security updates—are the primary targets. The vulnerability exploits a flaw in Zimbra's interface structure that automatically executes JavaScript contained within malicious HTML emails.

Merely previewing a malicious email can lead to the exfiltration of passwords, two-factor authentication tokens, and up to 90 days' worth of email data.