Malware: Owlproxy
【図表】 出典: https://securelist.com/the-sessionmanager-iis-backdoor/106868/ 【ニュース】 ◆The SessionManager IIS backdoor (SecureList, 2022/06/30) https://securelist.com/the-sessionmanager-iis-backdoor/106868/ 【関連情報】 ◆Microsoft Exc…
アプリ: Exchange Server
脆弱性: ProxyLogon / ProxyLogin
攻撃組織: Silk Typhoon / Hafnium / ハフニウム
攻撃組織: Tick / Bronze Butler / NCPH / RedBaldKnight / The Bald Knight Rises
攻撃組織: Calypso
攻撃組織: Websiic
攻撃組織: Winnti / APT41 / Blackfly / Suckfly / Wicked Panda / Wicked Spider / Barium (中国)
攻撃組織: Tonto Team
攻撃組織: Mikroceen / SixLittleMonkeys
攻撃組織: APT27 / Emissary Panda / Bronze Union / TG-3390 / ZipToken / ARCHERFISH / Iron Tiger
Malware: Owlproxy
【ブログ】 ◆Exchange servers under siege from at least 10 APT groups (WeLiveSecurity, 2021/03/10 14:00) [少なくとも10のAPTグループから四面楚歌のExchangeサーバー] ESET Research has found LuckyMouse, Tick, Winnti Group, and Calypso, among ot…