Data breachhigh

Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

The Hacker Newsby @TheHackersNewsAug 18, 2025 · 06:29 UTC (Aug 18, 2025)3 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2014-4078 CVE-2020-0796 CVE-2021-26855 CVE-2021-26857 CVE-2021-26858 CVE-2021-27065 CVE-2021-31206 CVE-2021-31207 CVE-2021-34473 CVE-2021-34523

Tags: cve-2014-4078 cve-2020-0796 cve-2021-26855 cve-2021-26857 cve-2021-26858 breach

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-0796	Unauthenticated RCE in Microsoft SMBv3 (SMBGhost)	10.0	100%	KEVRansomwarePoC ×2	Mar 12, 2020 KEV Feb 10, 2022
CVE-2021-26855 +3 related CVEs CVE-2021-27065 CVE-2021-26857 CVE-2021-26858	Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon)	9.1 group max	100%	KEVRansomwarePoC ×4	Mar 3, 2021 KEV Nov 3, 2021
CVE-2021-34473 +2 related CVEs CVE-2021-34523 CVE-2021-31206	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021

Indicators of compromise

auto-extracted · verify before use · export allAll

Type	Indicator	Context
domain	voen-pravo.online	s of the attacker infrastructure, including a domain named "voen-pravo[.]online" that has been found hosting a password-protected archive

From the original article

3 min read at thehackernews.com

Unidentified threat actors have been observed targeting publicly exposed Microsoft Exchange servers to inject malicious code into the login pages that harvest their credentials.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.