Tracked topic
… CERT Polska also asked admins to check their logs for suspicious activity, such as the Zimbra service restarting on its own, and for files created in the /opt/zimbra/jetty/webapps/, /opt/zimbra/jetty base/webapps/, and /tmp/ folders by user zimbra over the last 30 days. …
CISA is warning that the Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is targeting organizations using Zimbra Collaboration email servers by combining phishing attacks with the exploitation of a now-patched Zimbra vulnerability.
… Zimbra's software has becomes a target for malware execution Since older versions of Zimbra's Classic Web Client are considered highly vulnerable, all users and organizations are advised to upgrade to Zimbra version 10.1.19 as soon as possible. …
… Diverse internationale Behörden drängen laut CISA-Aufzählung Admins, die Zimbra-Software zu aktualisieren. Zudem liefert die CISA eine Liste mit Hinweisen auf erfolgreiche Angriffe Indicators of Compromise, IOC . Aktuell haben die Entwickler Zimbra 10.1.20 veröffentlicht. …