Operation RoundPress targets webmail software program to steal secrets and techniques from e mail accounts belonging primarily to governmental organizations in Ukraine and protection contractors within the EU
15 Could 2025
ESET researchers have found a cyberespionage operation that abuses cross-site scripting (XSS) vulnerabilities, together with a zero-day XSS flaw in MDaemon webmail software program, to steal confidential info from particular e mail accounts belonging to officers working for varied governmental organizations in Ukraine and protection contractors in Europe and on different continents.
Operation RoundPress, so nicknamed by ESET, is most likely the work of the Russia-aligned Sednit APT group, who first took goal at Roundcube, however later expanded its concentrating on to different webmail software program, together with Horde, MDaemon, and Zimbra. In some circumstances, the attackers even circumvented two-factor (2FA) authentication.
What else is there to know concerning the operation’s ways, strategies, and procedures? Study from ESET Chief Safety Evangelist Tony Anscombe within the video and ensure to learn the total blogpost.













https://wommens.com.tr/
istanbul nakliyat
I’ve been following your blog for a few months now, and this might be my favorite post yet! You have such a gift for taking complicated ideas and making them accessible to everyone. I also really appreciate how you acknowledge different perspectives and don’t pretend there’s only one right way to approach things. The nuance in your writing is something I don’t see enough of online these days. Looking forward to whatever you publish next!