Official administrators will never ask for passwords or sensitive personal data via email. Treat unsolicited attachments or links requesting credential verification with extreme suspicion.

Zimbra is a high-value target for cyberespionage.