Malwarehigh

Prometei botnet is targeting ProxyLogon Microsoft Exchange flaws

Security Affairsby @securityaffairsMar 11, 2023 · 11:58 UTC (Mar 11, 2023)3 min read3 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-27065 CVE-2021-26858

Tags: cve-2021-27065 cve-2021-26858 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-27065 +1 related CVE CVE-2021-26858	ProxyLogon chain RCE in Microsoft Exchange Server (CVE-2021-27065)	7.8	100%	KEVRansomwarePoC ×2	Mar 3, 2021 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

Attackers are exploiting the ProxyLogon flaws in Microsoft Exchange to recruit machines in a cryptocurrency botnet tracked as Prometei. Experts from the Cybereason Nocturnus Team have investigated multiple incidents involving the Prometei Botnet.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.