Laundry Bear exploits security flaw in unpatched Zimbra servers, stealing 90 days of emails and authentication data without victims clicking a link.
https://www.foxnews.com/tech/russian-hackers-steal-emails-without-click
https://www.foxnews.com/tech/russian-hackers-steal-emails-without-click