TA488 Deploys Unknown OWAReaper Backdoor Against Mail Servers30. July 2026CybersecurityTA488 infects mailboxes with OWAReaper via CVE-2026-42897 in Outlook Web Access through incidental email opening and secures persistent access via browser local storage and stolen OAuth tokens. Share on: