NewsProofpoint Threat Insight

    ta458 roundpress exploits

    Share
    This is part 2 of a 2-part blog series Proofpoint is publishing about Russian espionage actors using half-click exploits to target government webmail servers. Read part 1 about TA488 here, and the accompanying advisory from NSA here. Threat Research would like to thank the Proofpoint Cloudmark Authority team. Key Findings The Russia-aligned threat actor TA458, the group behind Operation RoundPress, continues to focus on webmail targeting using half-click exploits as a way to steal highly sensitive email data. A “half-click exploit” requires no social engineering, nor does it require a user to…

    Linked advisories

    Affected vendors and products

    Source: https://www.proofpoint.com/us/blog/threat-insight/ta458-roundpress-exploits

    ID