Phishing Campaign Targets Zimbra Users

A new phishing campaign is targeting small and medium-sized businesses and government agencies in several countries that use the Zimbra Collaboration platform, aiming to gather credentials for use in potential further operations.

The campaign has been ongoing since at least April and, unlike some previous campaigns targeting Zimbra products, this one mainly relies on social engineering and does not exploit a vulnerability. Researchers at ESET discovered the campaign and have not been able to attribute it to any known attack …

april businesses campaign campaigns collaboration collaboration platform countries credentials government government agencies medium medium-sized businesses operations phishing phishing campaign platform products social targeting zimbra