
In June 2024, a sophisticated phishing attack aimed at a governmental organization in the Commonwealth of Independent States (CIS) brought to light a severe security flaw in Roundcube, a widely-used open-source webmail software. Positive Technologies, a reputable cybersecurity firm, discovered that threat actors leveraged a stored cross-site scripting (XSS) vulnerability, cataloged as CVE-2024-37383, to steal user credentials. This article dives










