HACKERS EXPLOIT ROUNDCUBE WEBMAIL FLAW TO STEAL EMAIL CREDENTIALS

Summary from the TLDR InfoSec newsletter

Russian cybersecurity company Positive Technologies has detected an ongoing campaign that exploits a medium-severity stored XSS flaw in Roundcube webmail. The flaw lies in the improper processing of SVG elements in emails which bypass syntax checks. The threat actor sends an email with no visible text and a .doc attachment which contains a hidden payload disguised as a href that injects an unauthorized login form into the HTML message.