Hackers Exploit Roundcube N-Day Flaws to Steal Credentials and Deploy VShell

A newly identified hacking campaign is targeting university mail servers by exploiting known but unpatched flaws in Roundcube webmail software. The attackers are using these gaps to quietly steal login credentials and plant a powerful backdoor called VShell deep inside compromised systems. The campaign, tracked under the name UNK_MassTraction, has been active since May 2026 […] The post Hackers Exploit Roundcube N-Day Flaws to Steal Credentials and Deploy VShell appeared first on Cyber Security News.