Web Shells News Today

On a Saturday night, a security engineer at Equifax was updating an SSL certificate on a Network Intrusion Detection System (NIDS). Immediately after, suspicious connections were detected. After a more in-depth investigation, it became evident that the situation was far graver than anticipated. A service had to be promptly shut down to prevent further exploitation, but by that point, the damage was already done. Malicious actors had been exfiltrating data for several months and had already colle...

The Federal Government has ignored the pleas of technology industry bodies and passed a bill that will enable it to take control of private infrastruc...

Does FBI Exchange Remediation Action Set a Precedent? annamadeline) • April 16, 2021     13 Minutes    Twitter Get Permission The latest edition of the ISMG Security Report features an analysis of whether the FBI removing malicious web shells from hundreds of compromised Microsoft Exchange Servers could set a precedent. In this report, youll hear (click on player beneath image to listen): ISMG’s ...

By Mike Lennon on April 14, 2021 FBI agents executed a court-authorized cyber operation to delete malicious web shells from hundreds of previously hacked Microsoft Exchange servers in the United States, unbeknownst to their owners, the U.S. Department of Justice (DoJ) said Tuesday. After a wave of major in-the-wild zero-day attacks against Exchange Server installations that occurred globally in January, savvy organizations scrambled to lock down vulnerable Microsoft email servers and remove we...

iTWire Wednesday, 14 April 2021 17:54 FBI cleans up Web shells on Microsoft Exchange Server installations Featured Image by Clker-Free-Vector-Images from Pixabay The FBI has intervened to clean up the mess left by attacks on on-premise Microsoft Exchange Server installations after obtaining court orders to access hundreds of vulnerable machines in the US and remove Web shells. In a statement issued on Tuesday, the Department of Justice said these servers had been explo...

Over 10 different threat groups exploit Microsoft mail server flaws, researchers say Updated: Updated: March 11, 2021 17:00 IST The anti-virus software maker said threat actors potentially used Microsoft’s mail server flaws to install malware like web shells and gain backdoor entry into victims’ email servers. It has identified the presence of web shells on more than 5,000 unique servers in over 115 countries. Share Article Over 10 different threat groups exploit Microsoft mail server flaws...

ProxyLogon PoC Exploit Released; Likely to Fuel More Disruptive Cyber Attacks The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) on Wednesday issued a joint advisory warning of active exploitation of vulnerabilities in Microsoft Exchange on-premises products by nation-state actors and cybercriminals. "CISA and FBI assess that adversaries could exploit these vulnerabilities to compromise networks, steal information, encrypt data for ran...