Microsoft Exchange targeted by threat actors backed by Iranian government
(Windows Phone Central)

A joint security advisory breaks down attacks from an Iranian government-sponsored group. What you need to know A joint cybersecurity advisory breaks down a threat group that is believed to be connected to the Iranian government. The group has exploited Microsoft Exchange vulnerabilities since October 2021. The advisory claims that the threat actors are targeting a broad range of victims in several U.S. critical infrastructure sectors. A joint security advisory claims that an advanced persistent threat (APT) group associated with the Iranian government is threatening multiple victims from U.S. critical infrastructure sectors. The group is said to have exploited a Microsoft Exchange vulnerability since at least October 2021 and a Fortinet vulnerability since at least March 2021. These attacks aim to gain access that can be leveraged for data exfiltration or encryption, ransomware, and extortion. The advisory is the result of a joint effort by the Federal Bureau of Investigatio...