INCIDENT FILE / 08

2021-03-02 · Mail servers / Global

Microsoft Exchange on-premises

Multiple organizations faced unauthorized access and persistence inside mail servers.

01

Attack path

Exploitation of on-premises Exchange flaws to reach email and install web shells.

02

Confirmed impact

Multiple organizations faced unauthorized access and persistence inside mail servers.

03

Response

Emergency patching, compromise assessment, web-shell removal and rebuilding where required.