Microsoft urges Exchange admins to remove some antivirus exclusions
Tags
attack-pattern: Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006 Powershell - T1086
Show in Graph
Common Information
Type Value
UUID b5536651-1ea0-45b8-ba20-44f118d087b5
Fingerprint 37d99a53d8726ed7
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 23, 2023, midnight
Added to db Feb. 24, 2023, 2:52 a.m.
Last updated Nov. 18, 2024, 1:24 p.m.
Headline Microsoft urges Exchange admins to remove some antivirus exclusions
Title Microsoft urges Exchange admins to remove some antivirus exclusions
Detected Hints/Tags/Attributes 18/1/4
Source URLs
Redirection Url
Details Source https://www.bleepingcomputer.com/news/security/microsoft-urges-exchange-admins-to-remove-some-antivirus-exclusions/
URL Provider
Details Provider Source level domain
Details bleepingcomputer.com www.bleepingcomputer.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 163 ✔ — https://media.cert.europa.eu/rss?type=category&id=Malware&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 398 
asp.net
Details Domain 285 
microsoft.net
Details File 1212 
powershell.exe
Details File 2 
%systemroot%\system32\inetsrv\w3wp.exe