#ParsedReport #CompletenessLow
17-09-2026

Your Zimbra server is under threat

https://habr.com/ru/companies/pt/articles/1082654/

Report completeness: Low

Threats:
Targetzimbra
Gsocket_tool
Cyberstrikeai_tool

Victims:
Zimbra mail servers, Mail services

CVEs:
CVE-2026-73570 [Vulners]
CVSS V3.1: 8.9,
Vulners: Exploitation: True
Soft:
- synacor zimbra_collaboration_suite (<10.1.20)


ChatGPT TTPs:
do not use without manual check
T1041, T1059.004, T1070.004, T1071.001, T1083, T1105, T1190, T1486, T1505.003

IOCs:
File: 1
IP: 23

Soft:
Zimbra, Zimbra Collaboration Suite, Linux, Nginx, imbra so

Algorithms:
chacha20

Platforms:
x64

Links:
https://github.com/Ed1s0nZ/CyberStrikeAI