Cybersecurity · VIDEO
Laundry Bear exploits Zimbra vulnerabilities to steal emails: 90 days of data at risk
The Laundry Bear hacker group, linked to Russia, exploits an XSS vulnerability in Zimbra Collaboration Suite to steal emails and credentials. The campaign, a...
KEY TAKEAWAYS
- Laundry Bear steals 90 days of emails, passwords, and 2FA tokens by exploiting CVE-2025-66376 in Zimbra
- The group uses cloud infrastructure and VPN to hide data exfiltration activities
- Victims include strategic sectors such as defense, government, and energy
- Organizations must update Zimbra and monitor suspicious account activities
