CVE-2026-50055: Zimbra Mail Forwarding Restriction Bypass
A vulnerability in Zimbra that allows authenticated users to bypass mail forwarding restrictions and exfiltrate email. Discovered by Rapid7 researcher Jonah Burgess.
Tag: exfiltration
TmcPayload: Data Exfiltration Payload
TmcPayload is an encrypted payload deployed by TmcLoader to exfiltrate stored sensitive data from victim machines. It was part of the evolved…
MinIO: Object Storage
MinIO is used by GigaWiper for data exfiltration, appearing as normal storage traffic.
ZOHOMURK: Zoho WorkDrive Dead Drop Malware
ZOHOMURK is a novel malware that uses hardcoded Zoho OAuth credentials to turn an attacker-controlled WorkDrive account into a dead drop for…