Suspected Chinese snoops caught breaking into universities' Roundcube mailservers

Suspected Chinese spies have been breaking into major US and Canadian universities since May, exploiting vulns in Roundcube mailservers to steal data belonging to physics and engineering administrators and professors, according to Proofpoint threat researchers. Proofpoint directly observed “less than 10” universities targeted in these intrusions, Greg Lesnewich, principal threat research engineer at Proofpoint, told The Register. “We estimate the total volume of targets would be a few dozen universities, but stress that this is at best a guess, not substantiated by our data.” While the most recent sighting occurred in early June, “we believe it is likely that the campaign is ongoing,” Lesnewich said. The email security shop...

Read the full article at the source.