ET SCAN Zimbra Collaboration Global Address List Bulk Enumeration
Sourceet/open
Fileemerging-scan.rules
CreatedJuly 21, 2026
UpdatedJuly 21, 2026
Classificationattempted-recon
alert http any any -> [$HOME_NET,$SMTP_SERVERS] any (msg:"ET SCAN Zimbra Collaboration Global Address List Bulk Enumeration"; reference:url,www.proofpoint.com/us/blog/threat-insight/ta488-targets-zimbra-mailservers-half-click-exploits ; classtype:attempted-recon; sid:2071249; rev:1; metadata:affected_product Zimbra, attack_target SMTP_Server, created_at 2026_07_21, deployment Perimeter, deployment Internal, confidence High, signature_severity Informational, updated_at 2026_07_21;)
Detection details are hidden.
References
Metadata
affected productZimbra
attack targetSMTP_Server
created at2026_07_21
deploymentInternal
confidenceHigh
signature severityInformational
updated at2026_07_21
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!