Tag: ta488

1 article

Server room with computer equipment, cables, and rack in a government or corporate office setting.

Russia-Aligned TA488 Exploits Outlook Web Access With Persistent Implant

A Russia-aligned espionage group, known as TA488, has launched a sophisticated attack using a half-click backdoor, exploiting a flaw in Outlook Web Access to deploy a persistent implant. This new implant, dubbed OWAReaper, allows the group to maintain server-side access, marking a significant escalation in their cyber operations.

Analyst 207