LAUNDRY BEAR targets Zimbra: why viewing an email can require a full compromise investigation
The NCSC and partners attribute a Zimbra email-theft campaign to LAUNDRY BEAR. Their advisory explains view-triggered exploitation, application-password persistence and investigation priorities.