Exposed: The PowerExchange Backdoor Vulnerability in Microsoft Exchange Servers | Threat Intelligence | CloudSEK
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Web Services - T1583.006 Web Services - T1584.006 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID f430bbac-fa6f-4a75-80ec-f785fefc17b0
Fingerprint 278c041126b8ecd1
Analysis status DONE
Considered CTI value 0
Text language
Published May 30, 2023, midnight
Added to db Nov. 19, 2023, 5:58 a.m.
Last updated Nov. 13, 2024, 7:21 p.m.
Headline Exposed: The PowerExchange Backdoor Vulnerability in Microsoft Exchange Servers
Title Exposed: The PowerExchange Backdoor Vulnerability in Microsoft Exchange Servers | Threat Intelligence | CloudSEK
Detected Hints/Tags/Attributes 32/2/1
Source URLs
Redirection Url
Details Source https://cloudsek.com/threatintelligence/exposed-the-powerexchange-backdoor-vulnerability-in-microsoft-exchange-servers
Details Source https://www.cloudsek.com/threatintelligence/exposed-the-powerexchange-backdoor-vulnerability-in-microsoft-exchange-servers
URL Provider
Details Provider Source level domain
Details cloudsek.com www.cloudsek.com
Details cloudsek.com cloudsek.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 89 ✔ CloudSEK Threat Intelligence https://cloudsek.com/threatintelligence/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Threat Actor Identifier - APT 258 
APT34