Unknown Threat Actors Exploit Roundcube Webmail Flaw in Phishing Campaign

Hackers used a patched Roundcube vulnerability in a phishing attack to steal user credentials. Positive Technologies found an email sent to a government organization in June 2024, containing an empty message with an attached document.