Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite

Russian state-backed cyber actors, tracked as LAUNDRY BEAR, are exploiting a zero-day vulnerability in Zimbra Collaboration Suite to covertly exfiltrate sensitive email data from Western government and commercial organizations via a novel phishing campaign that activates upon merely viewing a malicious email.