The article describes Operation GhostMail, a campaign by a Russian APT group exploiting a Zimbra Webmail vulnerability to target a Ukrainian state agency. The specific attack vector, CVSS score, affected versions, fixed version, and workarounds are not provided in the given text.
2026-03-17 (Back to Inventory) Operation GhostMail: Russian APT exploits Zimbra Webmail to Target Ukraine State Agency Author(s): Sathwik Ram Prakki Organization: Seqrite js.unidentified_007 Open article directly Open article on Archive.org Related Articles 2025-11-03 ⋅ Seqrite ⋅ Sathwik Ram Prakki , Subhajeet Singha Operation Peek-a-Baku: Silent Lynx APT makes sluggish shift to Dushanbe Laplas (Reverseshell) SilentSweeper YoroTrooper 2025-10-31 ⋅ Seqrite ⋅ Sathwik Ram Prakki Operation SkyCloak: Tor Campaign targets Military of Russia & Belarus 2025-09-04 ⋅ Seqrite ⋅ Sathwik Ram Prakki , Subhajeet Singha Operation BarrelFire: NoisyBear targets entities linked to Kazakhstan’s Oil & Gas Sector. Meterpreter