Email Thief: An Active Exploitation of Zero-day Vulnerability in Zimbra - InfosecTrain

Zimbra is an open-source email platform often used by many European organizations in place of Microsoft Exchange. In December 2021, there is an active exploitation of Zero-day vulnerability in Zimbra as a part of the spear-phishing campaign, which Volexity discovered. The codename Email Thief: An Active Exploitation of Zero-day XSS Vulnerability in Zimbra- a detailed … Continue reading "Email Thief: An Active Exploitation of Zero-day Vulnerability in Zimbra"

Massive Infection through 0-day in the Zimbra (CVE-2022-41352)

CVE-2023-20269: Zero-Day Vulnerability in Cisco Adaptive Security Appliance and Firepower Threat Defense Reportedly Exploited by Ransomware Groups - Blog

Hackers Actively Exploiting Zero-day Vulnerability in Zimbra Server

Operation EmailThief: Active Exploitation of Zero-day XSS Vulnerability in Zimbra

Zimbra Vulnerability Exploited in the Wild – Gridinsoft Blog

Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker Groups

eSentire, eSentire

Zimbra Warns of Critical Zero-Day Flaw in Email Software Amid Active Exploitation

eSentire, eSentire

eSentire, eSentire

Google: Hackers exploited Zimbra zero-day in attacks on govt orgs

What is a zero-day exploit? Definition and prevention tips – Norton

Searching Strings In Zimbra Mailbox LINUX DIGEST, 56% OFF

Zimbra Zero-Day Exploited to Hack Government Emails - SecurityWeek

Cyble - Zimbra Email Vulnerability (CVE-2022-37042) Weaponized To Cause Large-scale Compromise