An ongoing malware campaign exploits Microsoft Exchange Server flaws

The ongoing malware campaign targeting organizations in Africa and the Middle East exploits Microsoft Exchange Server flaws to distribute malware, including an unknown keylogger embedded in the main Exchange Server page, collecting account credentials. Positive Technologies researchers identified over 30 victims mostly linked to government agencies in countries like Russia, U.A

E., Kuwait, Oman, Niger, Nigeria, Ethiopia, Mauritius, Jordan, and Lebanon. The campaign has been active since at least 2021, affecting organizations primarily in Africa and the Middle East. ```
https://securityaffairs.com/163521/breaking-news/microsoft-exchange-server-flaws-attacks.html