Russian cybercriminals have been exploiting a critical zero-day vulnerability in Zimbra's email platform, allowing them to compromise systems simply by victims viewing an email. Targets included NATO and Ukrainian entities, with the group stealing sensitive information.