At least 10 hacking groups using Microsoft software flaw: Report
At least 10 hacking groups are using flaws in Microsoft Corp.’s mail server software to break in to targets around the globe, cybersecurity company ESET has warned.
On March 2, Microsoft said there were vulnerabilities in its Exchange Server mail and calendar software for corporate and government data centers. Tens of thousands of organizations have been compromised so far.
The recently discovered flaws enable hackers to conduct industrial-scale cyber espionage and steal emails virtually at will from vulnerable servers or move elsewhere in the network.
In a blog post on Wednesday, ESET said there were already signs of cybercriminal exploitation, noting a group, which specializes in stealing computer resources to mine cryptocurrency, is breaking in to previously susceptible Exchange servers to spread its malicious software.
Nine other espionage-focused groups, the company said, were abusing the flaws to break in to targeted networks, several of which have been tied to China. Beijing, however, denies any role.
Authorities in the United States and Europe have, in the meantime, issued warnings about the weaknesses found in the software as new victims are being made public daily.
Norway’s parliament, for instance, announced Wednesday that data had been “extracted” in a breach made possible because of the Microsoft flaws.
In Germany, the country’s cybersecurity watchdog agency also said on Wednesday two federal authorities had been targeted.
Microsoft has issued security patches, but due to the slow pace of many customers’ updates - which experts attribute in part to the complexity of Exchange’s architecture - the field remains at least partially open to hackers of all types.
The hack will probably mark one of the top cybersecurity events of the year since Exchange is still widely used around the world.
Last week, the US Cybersecurity and Infrastructure Security Agency (CISA) warned that the flaws could "enable an attacker to gain control of an entire enterprise network."
Meanwhile, the administration of US President Joe Biden is expected to form a task force comprised of multiple agencies — including the National Security Council, FBI, CISA and others — to resolve the issue.
"This has the potential to simultaneously affect organizations that are critical to everyday life in the US," a source familiar with the US government investigation into the attack told CNN.
Israeli-US estate tycoon brothers charged with decade-long sex trafficking
US, Canadian universities hire Israeli firms to curb pro-Palestinian protests, report says
US nuclear spending cause for concern
Israeli military admits failure to intercept ballistic missile from Yemen
VIDEO | Palestine Action keeps winning
Gaza a ‘crucible of suffering’ for civilians: Irish president
Israeli forces kill Palestinian man in raid on occupied West Bank village
Hind Rajab Foundation names Israeli war criminals vacationing after Gaza genocide
'This is cruelty, not war,' Pope Francis slams Israel's brutality against Gaza children
IRGC intelligence forces bust Takfiri terrorist team in western Iran
Syria’s de facto new ruler names Asaad al-Shibani as foreign minister
PressTV NEWSLETTER
now
This makes it easy to access the Press TV website
