Search all coverage

Threat actor

Void Blizzard

Malpedia RU aka LAUNDRY BEAR

Tracked by CyberSIXT since Apr 10, 2026 · last activity Jul 25, 2026

Linked incidents

campaign open 7 articles

Russian Laundry Bear exploits Zimbra XSS flaw CVE-2025-66376

Associated CVEs

CVE-2025-66376KEV

Coverage timeline

Zimbra XSS bug CVE‑2025-66376 lets Russian hackers steal mail
socradar.io · Jul 25, 2026
US agencies warn Laundry Bear exploits CVE-2025-66376 in Zimbra
securityaffairs.com · Jul 24, 2026
Russian hackers exploit Zimbra zero‑day to spy on agencies
www.darkreading.com · Jul 23, 2026
LAUNDRY BEAR Uses CVE-2025-66376 to Hack Zimbra via Phishing
www.cisa.gov · Jul 23, 2026
UK NCSC alerts on Laundry Bear zero click attack on Zimbra email
www.ncsc.gov.uk · Jul 23, 2026
Russian zero-click attack exploits Zimbra flaw CVE-2025-66376
www.infosecurity-magazine.com · Jul 23, 2026
Russian hackers exploit Zimbra flaw in zero click email campaign
unit42.paloaltonetworks.com · Jul 23, 2026
US charges Russian hacker Denis Obrezko in Void Blizzard case
databreaches.net · Jun 10, 2026
Phishing kits bypass MFA, target US firms with AiTM at scale
socradar.io · Apr 10, 2026