The cybersecurity experts at Varonis security firm have recently discovered a Hive ransomware affiliate that has been deploying a variety of backdoors, including the Cobalt Strike beacon, in order to compromise the Microsoft Exchange servers that are vulnerable to the ProxyShell flaws. By deploying these backdoors the threat actors perform the following tasks and activities:- Network reconnaissance Steal admin account credentials Exfiltrate valuable data Deploying file-encrypting payload Here the experts at Varonis security firm have identified this flaw while investigating an attack on one of its users.

Read full article on GBHackers