Operation GhostMail: Russian APT Exploits Zimbra XSS to Target Ukraine Government

A Russian state-sponsored APT exploited a novel Zimbra webmail XSS vulnerability via a weaponized HTML email, enabling full browser-session hijack and stealthy credential and mailbox theft from a Ukrainian government agency without attachments, links, or traditional malware.