At a glance Actor TA488 (Void Blizzard / Laundry Bear), Russia-aligned Activity Half-click XSS exploit of Outlook Web Access; browser implant Targets US and European government; telecom, finance, hospitality, aerospace Scale Broad campaign from 22 July 2026; infrastructure built March 2026 Status Attributed by Proofpoint; joint NSA/FBI reporting; no arrests Source Proofpoint Threat Research TL;DR Proofpoint tracked a new half-click…

At a Glance Actor or group TA488 (Void Blizzard, Laundry Bear) and TA458 (Operation RoundPress), both Russia-aligned Activity type Espionage via cross-site scripting flaws in webmail; credential and email theft Targets Ukrainian government, US defense industrial base and nuclear installations, and government bodies across Eastern Europe Scale At least five months of undetected Zimbra exploitation; no victim count published Law-enforcement status…