At least 10 hacking groups using Microsoft software flaw: Report
At least 10 hacking groups are using flaws in Microsoft Corp.’s mail server software to break in to targets around the globe, cybersecurity company ESET has warned.
On March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. Tens of thousands of organizations have been compromised so far.
The recently discovered flaws enable hackers to conduct industrial-scale cyber espionage and steal emails virtually at will from vulnerable servers or move elsewhere in the network.
In a blog post on Wednesday, ESET said there were already signs of cybercriminal exploitation, noting a group, which specializes in stealing computer resources to mine cryptocurrency, is breaking in to previously susceptible Exchange servers to spread its malicious software.
Nine other espionage-focused groups, the company said, were abusing the flaws to break in to targeted networks, several of which have been tied to China. Beijing, however, denies any role.
Authorities in the United States and Europe have, in the meantime, issued warnings about the weaknesses found in the software as new victims are being made public daily.
Norway’s parliament, for instance, announced Wednesday that data had been “extracted” in a breach made possible because of the Microsoft flaws.
In Germany, the country’s cybersecurity watchdog agency also said on Wednesday two federal authorities had been targeted.
Microsoft has issued security patches, but due to the slow pace of many customers’ updates - which experts attribute in part to the complexity of Exchange’s architecture - the field remains at least partially open to hackers of all types.
The hack will probably mark one of the top cybersecurity events of the year since Exchange is still widely used around the world.
Last week, the US Cybersecurity and Infrastructure Security Agency (CISA) warned that the flaws could "enable an attacker to gain control of an entire enterprise network."
Meanwhile, the administration of US President Joe Biden is expected to form a task force comprised of multiple agencies — including the National Security Council, FBI, CISA and others — to resolve the issue.
"This has the potential to simultaneously affect organizations that are critical to everyday life in the US," a source familiar with the US government investigation into the attack told CNN.
Malcolm X’s daughters sue US police, FBI, CIA over ‘intentional’ killing
Russian court orders Google to pay staggering fine of $20 decillion
US police arrest pro-Palestine protesters for 'occupying' Minnesota University building
From Iraq to Gaza: The great disconnect between British people and rulers
Syria condemns Israel's killing of 36 in 'horrific' strike on Palmyra
Iran rejects UN human rights resolution as politically-motivated, unjustified
US Senate rejects bids to halt military sales to Israel
US veto of Gaza resolution 'license' for more Israeli crimes: Tehran
Iran urges IAEA Governors Board to oppose E3’s anti-Iran resolution
Nov. 20: ‘Axis of Resistance’ operations against Israeli occupation
VIDEO | Iran celebrates National Hero Day, honoring Martyr Qassem Soleimani
PressTV NEWSLETTER
now
This makes it easy to access the Press TV website
