Russia-backed threat actor targets Western organizations in phishing campaign

The threat actor exploited a zero-day flaw in Zimbra to exfiltrate months of emails and other sensitive information.