Attackers exploit critical Zimbra vulnerability using cc’d email addresses When successful, attacks install a backdoor. Getting it to work reliably is another matter.