Zimbra Vulnerability Exploited to Gain Access to Email Mailboxes

While these phishing emails contain hyperlinks to malicious URLs utilized by the threat actors to abuse the known vulnerabilities to execute JavaScript payloads.
It has been observed by Proofpoint researchers that TA473, a newly minted APT actor, abuses publicly facing Zimbra-hosted webmail portals by exploiting a vulnerability found in Zimbra, which has been tracked as CVE-2022-27926. The sole goal of this activity is to gain unauthorized access to the following organizations that

Zimbra Vulnerability Exploited to Gain Access to Email Mailboxes

Zimbra Vulnerability Exploited to Gain Access to Email Mailboxes

Zimbra Vulnerability Exploited to Gain Access to Email Mailboxes

Zimbra Vulnerability Exploited to Gain Access to Email Mailboxes

Zimbra Vulnerability Exploited to Gain Access to Email Mailboxes

Zimbra To Microsoft 365 Migration Userguide

Pros and Cons of Zimbra Email & Collaboration 2024

Guideline - How to convert Zimbra to Microsoft Outlook?

Zimbra mail client critical bug allows stealing email logins

How to install and configure Zimbra mail server