Conti Ransomware Is Now Using ProxyShell Exploits to Compromise Exchange Servers

ProxyShell Allows Unauthenticated, Remote Code Execution on Vulnerable Servers that Haven’t Been Mended.

According to cybersecurity researchers, the Conti ransomware threat actor has been used recently disclosed ProxyShell vulnerability exploits to hack into Microsoft Exchange servers and compromise corporate networks.

https://heimdalsecurity.com/blog/conti-ransomware-is-now-using-proxyshell-exploits-to-compromise-exchange-servers/

 

---