A China-linked threat cluster known as UNK_MassTraction targets Roundcube webmail servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware. The campaign, observed since May, focuses on physics and engineering departments, professors, administrators, and organizations involved in astrophysics, particle physics, or national security-related research. The