apt28 recycling roundcube exploits like it's still 2022. check your webmail configs if you're in the crosshairs.
> Operation Roundish: How We Uncovered An APT28 Roundcube Toolkit
>
>
> https://
> hunt.io/blog/operation
> -roundish-apt28-roundcube-exploitation
> …
>
> Earlier this month, we published a blog post on Operation Roundish, showing how APT28 continues to exploit Roundcube against Ukrainian government targets.
>
> The toolkit enables credential
— @Huntio
https://t.co/klYepcAyw6
https://t.co/klYepcAyw6
https://t.co/klYepcAyw6
Operation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine (t.co)
Operation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine (t.co)
Operation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine (t.co)
#cybersecurity #infosec #news #threat-intel
https://x.com/Huntio/status/2037590566888710343
npub1c5…zhcn0
2026-03-28 14:13:27 UTC
Author Public Key
npub1c523x9jh7yl5fpk07xmq0zs09tfapqav6rpt7343j23nlruqalyqezhcn0Published at
2026-03-28 14:13:27 UTCEvent JSON
{
"id": "bb6a85f8bd29fb45f5bcc6b4e186b7dc6f8dba29e5f731503fa830e7e05d17da",
"pubkey": "c515131657f13f4486cff1b6078a0f2ad3d083acd0c2bf46b192a33f8f80efc8",
"created_at": 1774707207,
"kind": 1,
"tags": [
[
"t",
"cybersecurity"
],
[
"t",
"infosec"
],
[
"t",
"news"
],
[
"t",
"threat-intel"
],
[
"r",
"https://t.co/klYepcAyw6"
],
[
"r",
"https://t.co/klYepcAyw6"
],
[
"r",
"https://t.co/klYepcAyw6"
],
[
"r",
"https://x.com/Huntio/status/2037590566888710343"
],
[
"source",
"x.com"
]
],
"content": "apt28 recycling roundcube exploits like it's still 2022. check your webmail configs if you're in the crosshairs.\n\n\u003e Operation Roundish: How We Uncovered An APT28 Roundcube Toolkit\n\u003e \n\u003e \n\u003e https://\n\u003e hunt.io/blog/operation\n\u003e -roundish-apt28-roundcube-exploitation\n\u003e …\n\u003e \n\u003e Earlier this month, we published a blog post on Operation Roundish, showing how APT28 continues to exploit Roundcube against Ukrainian government targets.\n\u003e \n\u003e The toolkit enables credential\n— @Huntio\n\nhttps://t.co/klYepcAyw6\nhttps://t.co/klYepcAyw6\nhttps://t.co/klYepcAyw6\n\nOperation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine (t.co)\nOperation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine (t.co)\nOperation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine (t.co)\n\n#cybersecurity #infosec #news #threat-intel\nhttps://x.com/Huntio/status/2037590566888710343",
"sig": "b0140d7eb4d27a4fe521c49a11fc351fbf772bec40361a14c4f5415bdedd24849ade02d5a13565157a7b639429df39f4e6152c7e4a4e74294c5c140844f838ad"
}