Click here to download all references as Bib-File.

Enter keywords to filter the library entries below or Propose new Entry
2021-03-09Attivo NETWORKSAnil Gupta, Gorang Joshi, Saravanan Mohan
Hafnium – Active Exploitation of Microsoft Exchange and Lateral Movement
2021-03-09MicrosoftMSRC Team
Microsoft Exchange Server Vulnerabilities Mitigations – updated March 9, 2021
HAFNIUM
2021-03-08SymantecThreat Hunter Team
How Symantec Stops Microsoft Exchange Server Attacks
CHINACHOPPER MimiKatz
2021-03-08Palo Alto Networks Unit 42Jeff White
Analyzing Attacks Against Microsoft Exchange Server With China Chopper Webshells
CHINACHOPPER
2021-03-08MicrosoftYonit Glozshtein
Investigating the Print Spooler EoP exploitation
2021-03-07TRUESECRasmus Grönlund
Tracking Microsoft Exchange Zero-Day ProxyLogon and HAFNIUM
CHINACHOPPER
2021-03-06Blue Team BlogAuth 0r
Microsoft Exchange Zero Day’s – Mitigations and Detections.
2021-03-06BLUEHEXAGONRohit Kashi
Blue Hexagon Security Advisory: Microsoft Exchange Server 0-days
2021-03-06Github (microsoft)Microsoft
Security scripts
HAFNIUM
2021-03-05MicrosoftLouie Mayor
Exchange Server IIS dropping web shells and other artifacts
HAFNIUM
2021-03-05Github (cert-lv)Andrew Konst
Detect webshells dropped on Microsoft Exchange servers after 0day compromises
HAFNIUM
2021-03-04CrowdStrikeThe Falcon Complete Team
Falcon Complete Stops Microsoft Exchange Server Zero-Day Exploits
CHINACHOPPER HAFNIUM
2021-03-04FireEyeAndrew Thompson, Chris DiGiamo, Matt Bromiley, Robert Wallace
Detection and Response to Exploitation of Microsoft Exchange Zero-Day Vulnerabilities
CHINACHOPPER HAFNIUM
2021-03-04MicrosoftAndrea Lelli, Ramin Nafisi
GoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence
GoldMax
2021-03-04MicrosoftAndrea Lelli, Microsoft 365 Defender Threat Intelligence Team, Microsoft Threat Intelligence Center (MSTIC), Ramin Nafisi
GoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence
SUNBURST TEARDROP UNC2452
2021-03-03GTSCGTSC
'Mild' update on Microsoft Exchange 0day security vulnerability being used to attack organizations in Vietnam
ToddyCat
2021-03-03CISAUS-CERT
Mitigate Microsoft Exchange On-Premises Product Vulnerabilities
2021-03-03CISACISA
Alert (AA21-062A): Mitigate Microsoft Exchange Server Vulnerabilities
HAFNIUM
2021-03-02MicrosoftTom Burt
New nation-state cyberattacks (HAFNIUM)
2021-03-02MicrosoftMSRC Team
Multiple Security Updates Released for Exchange Server – updated March 8, 2021
HAFNIUM