Webmail Services Are Under A Barrage Of XSS Attacks. What SMBs Need To Know
ESET, Friday, June 20th, 2025
XSS attacks are a prevalent threat but can be stopped at multiple stages, and businesses need only simple tools to do it.
Due to their flexibility and affordability, webmail services are a popular alternative to traditional on-prem email applications. However, the way they operate creates opportunities for cybercriminals to inject malicious code into visited websites to steal valuable business data.
This is a well-known fact, and the recent ESET research blog on cybercriminal group Sednit's campaign to target multiple webmail services confirms that it remains a popular way to compromise businesses.