But wait, there’s more. Google’s superhero squad uncovered that a group called Winter Vivern snagged the exploit in mid-July and targeted government peeps in Moldova and Tunisia. Another mysterious player used the same trick to fish for credentials from Vietnam’s government members, publishing the loot on a dodgy government domain. The final act took aim at a government organization in Pakistan to swipe Zimbra authentication tokens, the golden keys to locked-up info.
