Russian APT Laundry Bear Deploys AI-Assisted Zero-Click Phishing Against Zimbra Users

A Russian state-sponsored threat actor has developed a novel zero-click phishing technique, apparently with AI assistance, to target Western organizations using Zimbra email software. The attack requires no user interaction to compromise systems, representing a significant escalation in phishing sophistication. Security researchers warn that the technique could be adapted to other email platforms.

Why it matters: IT managers and security teams need immediate awareness of this zero-click attack vector, as Zimbra is widely deployed in enterprises and the no-interaction requirement bypasses traditional user-awareness defenses.