CyberSecurityBoardThreat Intel · CVEs · Products
Malware

ZimReaper: JavaScript Malware Targeting Zimbra Mail Servers

July 23, 2026

ZimReaper is a malicious JavaScript delivered via a half-click exploit (CVE-2025-66376) by the Laundry Bear threat actor. It harvests email communications and sensitive data from Zimbra webmail.