Threat actor
Void Blizzard
Tracked by CyberSIXT since 10 Apr · last activity 25 Jul
- CVEs linked · all time
- 1
- in CISA KEV · all time
- 1
- articles · all time
- 9
No articles in the last 45 daysThe latest: SOCRadar, Sat 25 Jul, 10:21 UTC.See the full timeline
CVEs
1 CVECVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityCVSS7.2HighExploited20%EPSS12articles
- Zimbra XSS bug CVE‑2025-66376 lets Russian hackers steal mailSOCRadar
- US agencies warn Laundry Bear exploits CVE-2025-66376 in ZimbraSecurity Affairs
- Russian hackers exploit Zimbra zero‑day to spy on agenciesDark Reading
- LAUNDRY BEAR Uses CVE-2025-66376 to Hack Zimbra via PhishingCISA · official notice
- UK NCSC alerts on Laundry Bear zero click attack on Zimbra emailNCSC · official notice
- Russian zero-click attack exploits Zimbra flaw CVE-2025-66376Infosecurity
- Russian hackers exploit Zimbra flaw in zero click email campaignUnit 42
- US charges Russian hacker Denis Obrezko in Void Blizzard caseDataBreaches
- Phishing kits bypass MFA, target US firms with AiTM at scaleSOCRadar · first in our coverage