ESET researchers have observed a new phishing campaign targeting users of the Zimbra Collaboration email server.