Data breachhigh

MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks

The Hacker Newsby @TheHackersNewsMay 22, 2024 · 13:43 UTC (May 22, 2024)1 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-34473 CVE-2021-34523 CVE-2021-31207

Tags: cve-2021-34473 cve-2021-34523 cve-2021-31207 breach

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021
CVE-2021-34473 +1 related CVE CVE-2021-34523	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021

From the original article

1 min read at thehackernews.com

 Ravie Lakshmanan  May 22, 2024 Vulnerability / Data Breach An unknown threat actor is exploiting known security flaws in Microsoft Exchange Server to deploy a keylogger malware in attacks targeting entities in Africa and the Middle East. Russian cybersecurity firm Positive Technologies said it identified over 30 victims spanning government agencies, banks, IT companies, and educational institutions.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.