One Email Closer to the Edge: UNK_MassTraction & the Physics of Exploitation

A China-aligned threat actor dubbed UNK_MassTraction is exploiting multiple Roundcube mailserver vulnerabilities to stealthily compromise US and Canadian university physics and engineering departments, steal credentials, and establish persistent network access for espionage purposes.