Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
A suspected China-aligned threat cluster known as UNK_MassTraction is targeting university departments through the exploitation of Roundcube webmail vulnerabilities to deploy malware and gain persistent network access. This campaign uses phishing and N-day security flaws to siphon credentials and install backdoors like VShell.