Zimbra
- Malware type
- ransomware
- Last IoC activity
- 2026-07-21 10:02:11
- Profile updated
- 2026-07-07 13:40:50
Targeted industries: government-and-public-sector financial-services education-and-nonprofits
Context
Zimbra is a ransomware strain often distributed via phishing emails. It demands payment for decrypting locked files, with instructions typically sent from the email address [email protected].
Reports & references
- bleepingcomputer.com — Zimbra Ransomware Written In Python Help And Support Topic Crypto Howtotxt (report)
- id-ransomware.blogspot.com — Zimbra Ransomware Aes Optzimbrastore (report)