Zimdown2

Reported Context (1)

In at least one campaign, the attackers have been found to use a lightweight shell downloader for a Zimdown2 Go binary that then acts as an installer for the Zimclient2 remote-access agent. Attackers Exploit Zimbra Flaw to Deploy Web Shells and Steal Mailbox Data

CVE (1)

Malware (2)

MITRE ATT&CK (13)

Vendors (1)

Products (2)

Tools (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.