US and Allies Accuse Russian Hackers of Email Theft Without Social Engineering
The United States, along with over a dozen allied nations, has accused Russian hackers of stealing emails from users of the Zimbra email program without employing traditional social engineering tactics. According to cybersecurity firm Proofpoint, the hackers exploited a vulnerability in the Zimbra software, which allowed them to compromise accounts simply by having users open an email. This method, described as a 'half-click exploit,' did not require users to click on any links or open attachments. The hacking campaign, attributed to a Russian government-supported group known as Laundry Bear, initially targeted Ukraine before expanding to users in the US and other NATO member countries. The group is linked to Yutek-NN, a Russian cybersecurity company, whose deputy director faces hacking-related charges in the US. The Russian government has not responded to these allegations, and Moscow typically denies involvement in such cyber activities. 
