Click here to download all references as Bib-File.
| 2021-04-26 ⋅ Medium testbnull ⋅ Microsoft Exchange From Deserialization to Post-Auth RCE (CVE-2021–28482) |
| 2021-04-22 ⋅ Cybereason ⋅ Prometei Botnet Exploiting Microsoft Exchange Vulnerabilities Prometei |
| 2021-04-19 ⋅ CERT NZ ⋅ Microsoft 365 phishing using fake voicemail messages |
| 2021-04-16 ⋅ Associated Press ⋅ Sanctioned Russian IT firm was partner with Microsoft, IBM |
| 2021-04-16 ⋅ Zero Day ⋅ Sanctioned Firm Accused of Helping Russian Intelligence Was Part of Microsoft’s Early Vuln Access Program — MAPP |
| 2021-04-15 ⋅ Palo Alto Networks Unit 42 ⋅ Actor Exploits Microsoft Exchange Server Vulnerabilities, Cortex XDR Blocks Harvesting of Credentials CHINACHOPPER |
| 2021-04-13 ⋅ Department of Justice ⋅ Justice Department announces court-authorized effort to disrupt exploitation of Microsoft Exchange Server vulnerabilities |
| 2021-04-09 ⋅ Microsoft ⋅ Investigating a unique “form” of email delivery for IcedID malware IcedID |
| 2021-04-01 ⋅ Microsoft ⋅ Automating threat actor tracking: Understanding attacker behavior for intelligence and contextual alerting |
| 2021-03-27 ⋅ InfoSec Handlers Diary Blog ⋅ Malware Analysis with elastic-agent and Microsoft Sandbox |
| 2021-03-26 ⋅ Microsoft ⋅ Securing our approach to domain fronting within Azure |
| 2021-03-26 ⋅ Imperva ⋅ Imperva Observes Hive of Activity Following Hafnium Microsoft Exchange Disclosures CHINACHOPPER |
| 2021-03-25 ⋅ Google Project Zero ⋅ CVE-2021-26855: Microsoft Exchange Server-Side Request Forgery |
| 2021-03-25 ⋅ Microsoft ⋅ Analyzing attacks taking advantage of the Exchange Server vulnerabilities CHINACHOPPER |
| 2021-03-25 ⋅ Microsoft ⋅ Web Shell Threat Hunting with Azure Sentinel CHINACHOPPER |
| 2021-03-25 ⋅ Recorded Future ⋅ Suspected Chinese Group Calypso APT Exploiting Vulnerable Microsoft Exchange Servers Meterpreter PlugX |
| 2021-03-19 ⋅ Bundesamt für Sicherheit in der Informationstechnik ⋅ Microsoft Exchange Schwachstellen Detektion und Reaktion (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065) CHINACHOPPER MimiKatz |
| 2021-03-18 ⋅ YouTube (Microsoft Security) ⋅ How to protect against Microsoft Exchange Server |
| 2021-03-18 ⋅ CERT-BR ⋅ Communiqué de presse: 400 systèmes informatique belges infiltrés dans le cadre d'une vulnérabilité des serveurs Microsoft Exchange |
| 2021-03-16 ⋅ Microsoft ⋅ Guidance for responders: Investigating and remediating on-premises Exchange Server vulnerabilities |