Earth Baku – APT 41
Trend Micro has uncovered a campaign by Earth Baku, or APT41, against organizations in the Indo-Pacific region. The ongoing campaign by Earth Baku employs multiple attack vectors to target attacks on…
PlugX plugged in to Xchange Servers
A Chinese cyberespionage group known for targeting leveraged flaws in the Microsoft Exchange Server that came to light earlier deploying a previously undocumented variant of a remote access trojan (RAT)…
Posted incybersecurity Encryption Endpoint Security
Black Kingdom Ransomware
Another ransomware operation known as 'BlackKingdom' is exploiting the Microsoft Exchange Server ProxyLogon vulnerabilities to encrypt servers. Based on the logs from his honeypots, Hutchins states that the threat actor used the…
Defender Blocks Proxy Logon
Microsoft announced that Defender Antivirus and System Center Endpoint Protection now provide automatic protection against attacks exploiting the recently disclosed ProxyLogon vulnerabilities in Microsoft Exchange. “Today, we have taken an…
DearCry takes down ProxyLogon
Microsoft has confirmed that a new strain of ransomware is targeting vulnerable on-premise Microsoft Exchange Servers through the dangerous ProxyLogon vulnerabilities Ransom:Win32/DoejoCrypt.A or DearCry, was being deployed with initial compromise…