One Email Closer to the Edge: UNK_MassTraction & the Physics of Exploitation

Reported 07 Jul 2026 by otx · Severity: medium

Since May 2026, a suspected China-aligned threat cluster named UNK_MassTraction has been exploiting Roundcube mailservers at physics and engineering departments of US and Canadian universities. The campaigns exploit multiple n-day vulnerabilities including CVE-2024-42009 and CVE-