owareaper

Russian State Hackers Exploit Microsoft Outlook Vulnerability with OWAReaper Malware

Russian state-sponsored group TA488 is exploiting a maximum-severity Microsoft Outlook Exchange Server vulnerability (CVE-2026-42897) to install sophisticated OWAReaper malware, stealing credentials and gaining persistent access to OWA accounts.