Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit

TA488 has launched a sophisticated campaign exploiting a new Outlook Web Access vulnerability (CVE-2026-42897) to deliver a stealthy, persistent JavaScript implant called OWAReaper, enabling long-term access and credential theft across multiple sectors with minimal user interaction.