Name: Over 10 different threat groups exploit Microsoft mail server flaws, researchers say
Brand: thehindu.com
SKU: thehindu-com-160
Availability: OnlineOnly

critic

Over 10 different threat groups exploit Microsoft mail server flaws, researchers say

preview

(Subscribe to our Today's Cache newsletter for a quick snapshot of top 5 tech stories. Clickto subscribe for free.)Microsoft Exchange Server vulnerabilities are being exploited by more than 10 different advanced persistent threat (APT) groups to compromise email servers of various organisations, according to researchers at cybersecurity firm ESET.The anti-virus software maker said threat actors potentially used Microsoft’s mail server flaws to install malware like web shells and gain backdoor entry into victims’ email servers. It has identified the presence of web shells on more than 5,000 unique servers in over 115 countries, the company said in a release.The servers belong to private and public enterprises located around the world, it added. ESET noted that in certain instances, several threat actors were targeting the same organisation. Most recently,that may have granted the attacker access to personal data through emails held on the servers.The web shells deployed by the hackers are usually small pieces of malicious codes that allow them to run commands on servers to steal data or use the server to launch other activities, while allowing attackers to persist in an affected organisation, Microsoft explained in a blog post.Microsoft had released patches to fix Exchange Server vulnerability in 2013, 2016 and 2019 versions, last week, and urged its customers to apply them immediately. The company noted that the patch works only on devices that haven’t been compromised. Also Read |“The day after the release of the patches, we started to observe many more threat actors scanning and compromising Exchange servers en masse,” Matthieu Faou, Malware Researcher at ESET, said in a release. “Interestingly, all of them are APT groups focused on espionage, except one outlier that seems related to a known coin-mining campaign.”But, ESET’s analysis shows that “the threat is not limited to the widely reported Hafnium group.”The identified threat groups and behaviour clusters include Tick, LuckyMouse, Calypso, Websiic, Winnti Group, Tonto Team, ShadowPad activity, The “Opera” Cobalt Strike, IIS backdoors, Mikroceen, and DLTMiner, according to ESET. Some APT groups were exploiting the vulnerabilities even before the patches were released, the cybersecurity firm said. Also Read |“Even those [Exchange servers] not directly exposed to the internet should be patched. In case of compromise, admins should remove the web shells, change credentials and investigate for any additional malicious activity,” Faou said.This article is closed for comments.PleasePrintable version | Sep 13, 2022 5:59:47 pm |https://www.thehindu.com/sci-tech/technology/over-10-different-threat-groups-exploit-microsoft-mail-server-flaws-researchers-say/article34044256.ece© THG PUBLISHING PVT LTD.

(Subscribe to our Today's Cache newsletter for a quick snapshot of top 5 tech stories. Clickto subscribe for free.)Microsoft Exchange Server vulnerabilities are being exploited by more than 10 different advanced persistent threat (APT) groups to compromise email servers of various organisations, according to researchers at cybersecurity firm ESET.The anti-virus software maker said threat actors potentially used Microsoft’s mail server flaws to install malware like web shells and gain backdoor entry into victims’ email servers. It has identified the presence of web shells on more than 5,000...

public

Ishan Patra

thehindu.com

Credible

Speculation

Anecdotal Evidence

Generalization

Stacking the Deck

Appeal to Authority

Straw Man

Slippery Slope

Emotional Appeal

Red Herring

False Dilemma

Illogical

Moral Equivalency

Ad Hominem

Correlation w/o Causation

Semantics

Begging the Question

Faulty Analogy

Non Sequitur

Bandwagon

Dogmatism

Failing Occam's Razor

Biased

Pure Opinion

Hit Piece

Racial Bias

National Bias

Religious Bias

Financial Incentive

Political Agenda

Gender Bias

Misused Image/Video

Study Misinterpreted

Mistake

Misused Term

Science Misrepresented

Factual Error

Satire

Surface Level

Lack of Reliable Sources

Sensational

Not Credible

Investigative

Balanced

Well Sourced

Great Context

sports

entertainment

U.S.

international

business

technology

science

culture

politics

media

health

Over 10 different threat groups exploit Microsoft mail server flaws, researchers say

No article scores yet.

CRITIC REVIEWS

PUBLIC REVIEWS