Quantcast
Channel: Zimbra Forums
Viewing all articles
Browse latest Browse all 851

Administrators • What is compromized in this situation?

$
0
0
More and more lately, I'm receiving emails telling me that I've been blocked from the Zimbra server or need to update my account and other actions that would require credentials or other personal information.

This seems to be from spammers/phishers that are simply looking at the headers then trying to spoof the mail server contacting the users.
Since I manage the server myself, I know it's spam but today, something very strange came in with the simliar Zimbra look and feel.

Just recently, I had to sign a digital form with a vendor I know well so I went ahead.
Days later, today, I get one of the fake phishing emails but this time, it's much more specific, it's got a link asking me to sign an additional contract that was overlooked.

To me, this means someone is manually trying to get information from me since this seems too personal to be a bot.
It also seems like an interception of headers or something along those lines.

Do any of you have any thoughts on this, like who is the one that's maybe compromised (like my vendor) or are the Zimbra emails something others are seeing lately too?

Statistics: Posted by zim_mike — Mon Jan 29, 2024 3:09 pm



Viewing all articles
Browse latest Browse all 851

Trending Articles