Russia-aligned hackers exploit MDaemon mail server flaw to install backdoors
VULNERABILITYredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Russia-aligned threat actors are exploiting a flaw in MDaemon mail server software to execute code and install backdoors, with no user interaction required. ESET's APT Activity Report for Q2 to Q3 2026 describes the campaign as active in Ukraine, and ESET could not attribute it to a known Russia-aligned group.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether your organisation runs MDaemon mail server software.
- Look for signs of compromise on any MDaemon servers, given the active backdoor campaign.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers