Ongoing exploitation of CVE-2022-41352 (Zimbra 0-day)

We investigated CVE-2022-41352 and were able to confirm that unknown APT groups have actively been exploiting this vulnerability in the wild, one of which is systematically infecting servers in Central Asia.