OTX Threat: Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit

TA488, a Russia-aligned threat actor, initiated a campaign on July 22, 2026, exploiting CVE-2026-42897, a cross-site scripting vulnerability in Outlook Web Access. The campaign targeted US and European government entities, along with telecommunications, financial, hospitality, and aerospace sectors. The attack employs half-click exploits requiring only email opening to trigger compromise, deliveri CVEs: CVE-2026-42897 Sectors: Government, Telecommunications, Finance