A phishing campaign designed to collect Zimbra user credentials was uncovered by ESET. The campaign has been active since at least April 2023.