Threat actor
UNK_MassTraction
Tracked by CyberSIXT since 7 Jul · last activity 13 Jul
- CVEs exploited · attributed
- 2
- CVEs also mentioned · not attributed
- 0
- articles · all time
- 2
No articles in the last 45 daysThe latest: SecurityOnline, Mon 13 Jul, 18:22 UTC.See the full timeline
CVEs exploited
2 CVEs an article attributes to UNK_MassTractionCVE-2025-49113RoundCube Webmail Deserialization of Untrusted Data Vulnerability · attributed in coverage, 13 JulCVSS9.9CriticalExploited99%EPSS5articles
CVE-2024-42009RoundCube Webmail Cross-Site Scripting Vulnerability · attributed in coverage, 13 JulCVSS9.3CriticalExploited83%EPSS2articles
- UNK_MassTraction Exploits Roundcube Webmail to Hit University Physics DepartmentsSecurityOnline
- China linked hackers hit US Canada universities via RoundcubeInfosecurity · first in our coverage