Russian hackers expand half-click email attack from Zimbra to Outlook

Russian state-sponsored hackers have adapted their 'half-click' email attack from Zimbra to target Microsoft Outlook users. Opening a malicious message triggers a browser implant that persists across password changes and device rebuilds. The technique exploits a known vulnerability and requires minimal user interaction.