: Adding Ukrainian language packs and specific date/time formats.
: Russian state-sponsored groups like APT28 (Fancy Bear) have a documented history of targeting Ukrainian government agencies, including the State Hydrology Agency, by exploiting Zimbra vulnerabilities like CVE-2025-66376 . zimbra police gov ua repack
: Unsuspecting officers who entered their credentials into this "activation" page were actually sending their data to a proxy script hidden on a poorly secured Polish website. The Evolution: GhostMail and Invisible Code : Adding Ukrainian language packs and specific date/time
Added CVE-2025-66376 to the Known Exploited Vulnerabilities Catalog . including the State Hydrology Agency