Forest Global Training Partners

Cyber Risks · Krebs on Security

Warning the World of a Ticking Time Bomb

Summary: Hundreds of thousands of organizations running Microsoft Exchange email servers were mass-hacked, including at least 30,000 victims in the United States, with each compromised server retrofitted with a web shell backdoor giving attackers total remote control and access to all email. Some victims had three web shells installed and one was hit with eight distinct backdoors, and Microsoft attributed the initial activity to a Chinese group it called Hafnium before the exploitation became indiscriminate.

Key Takeaway: Every source Krebs spoke with expects profit-motivated criminals to mass-deploy ransomware through these existing backdoors, and researchers running honeypots report them being shelled left and right - so the offline backup you take now, disconnected from everything, may be the only thing standing between a web shell and your entire network.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related