The NSA and its partners have alerted users of a Russian state-supported phishing campaign targeting Zimbra Collaboration Suite, though the specific technical vulnerability exploited, its CVSS score, and the affected or fixed software versions are not detailed in the provided article excerpt.
2026-07-23 (Back to Inventory) NSA and Partners Alert Zimbra Collaboration Suite Users of a Russian State-Supported Phishing Campaign Author(s): NSA Organization: NSA js.zimreaper Open article directly Open article on Archive.org Related Articles 2026-04-07 ⋅ IC3 ⋅ CISA , CNMF , Department of Energy (DOE) , EPA , FBI , NSA AA26-097A: Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure 2025-12-04 ⋅ CISA ⋅ Canadian Centre for Cyber Security , CISA , NSA Malware Analysis Report (MAR) BRICKSTORM Backdoor BRICKSTORM 2025-04-09 ⋅ NCSC UK ⋅ ASD , BND , Bundesamt für Verfassungsschutz , Canadian Centre for Cyber Security (CCCS) , FBI , NCSC UK , New Zealand National Cyber Security Centre (NZ NCSC) , NSA Advisory: BADBAZAAR and MOONSHINE: Technical analysis and mitigations badbazaar