Yet another zmcat or counterpart cleaning guide for Zimbra
This zmcat derivative attack and attacker is very specialized for zimbra.Alot of files seem to be part of zimbra located different path, interestingly there isn't any unexpected files /tmp folder.And something in background clean/edit most of log files.
