Skip to content

CyberSIXT Search

Threat actor · coverage timeline

Void Blizzard

9 articles from 8 outlets between 10 Apr and 25 Jul. First reported by SOCRadar. The busiest day was Thu 23 Jul, with 5 articles.

Articles: 9; all time · from 8 outlets
Days with coverage: 5; across 107 days
Busiest day: 5; articles on Thu 23 Jul
Last 7 days: 0a day; vs 0 a day before
First report: 10 Apr; SOCRadar
CVEs named: 1; 1 in CISA KEV · in these articles

Coverage over time

9 articles · 10 Apr – 25 Jul

10 AprFirst report10 Apr · SOCRadar

Show as table

Void Blizzard: articles per day
Day (UTC)	Articles	Outlets
Fri 10 Apr	1	SOCRadar 1
Wed 10 Jun	1	DataBreaches 1
Thu 23 Jul	5	Unit 42 1, Infosecurity 1, NCSC 1, CISA 1, Dark Reading 1
Fri 24 Jul	1	Security Affairs 1
Sat 25 Jul	1	SOCRadar 1

Articles

9 articles

Sat 25 Jul1 article

10:21
Zimbra XSS bug CVE‑2025-66376 lets Russian hackers steal mailSOCRadar

Fri 24 Jul1 article

08:50
US agencies warn Laundry Bear exploits CVE-2025-66376 in ZimbraSecurity Affairs

Thu 23 Jul5 articles

22:07
Russian hackers exploit Zimbra zero‑day to spy on agenciesDark Reading
16:00
LAUNDRY BEAR Uses CVE-2025-66376 to Hack Zimbra via PhishingCISA · official notice
15:59
UK NCSC alerts on Laundry Bear zero click attack on Zimbra emailNCSC · official notice
15:59
Russian zero-click attack exploits Zimbra flaw CVE-2025-66376Infosecurity
14:20
Russian hackers exploit Zimbra flaw in zero click email campaignUnit 42

Wed 10 Jun1 article

23:56
US charges Russian hacker Denis Obrezko in Void Blizzard caseDataBreaches

Fri 10 Apr1 article

12:31
Phishing kits bypass MFA, target US firms with AiTM at scaleSOCRadar · first report