TA488 Exploits Outlook Half-Click Flaw to Deploy Persistent OWAReaper Backdoor

TA488 has resurfaced with a high‑end half‑click campaign against on‑premises Outlook Web Access (OWA), exploiting CVE‑2026‑42897 to deploy a persistent JavaS...