U.S. government entities

Russian threat actors are exploiting a vulnerability in Microsoft Outlook Web Access (OWA) to maintain mailbox access after credential rotation, targeting U.S. and European government entities and sectors like telecommunications, financial, hospitality, and aerospace. This follows their prior exploitation of a Zimbra vulnerability.