Microsoft warns customers against new China cyber attack on exchange email
Posted March 3, 2021
- Microsoft has warned its customers against a new sophisticated nation-state cyber attack that has its origin in China and is primarily targeting on-premises ‘Exchange Server’ software of the tech giant.
- Called “Hafnium,” it operates from China and is attacking infectious disease researchers, law firms, higher education institutions, defence contractors, policy think tanks and NGOs in the US for the purpose of exfiltrating information.
- The Microsoft Threat Intelligence Center (MSTIC) found that “Hafnium” would first gain access to an Exchange Server either with stolen passwords or by using the previously undiscovered vulnerabilities to disguise itself as someone who should have access.
- The company has released security updates to protect customers running Exchange Server, and encourages all Exchange Server customers to apply these updates immediately.
| March 3, 2021