Keylogger auf Microsoft Exchange Servern
Anmeldedaten können entwendet werden
Mehr dazu bei https://cybersecuritynews.com/keylogger-embedded-microsoft-exchange-server/
a-fsa.de/d/3AQ
Link zu dieser Seite: https://www.aktion-freiheitstattangst.org/de/articles/8791-20240529-keylogger-auf-microsoft-exchange-servern.html
Link im Tor-Netzwerk: http://a6pdp5vmmw4zm5tifrc3qo2pyz7mvnk4zzimpesnckvzinubzmioddad.onion/de/articles/8791-20240529-keylogger-auf-microsoft-exchange-servern.html
Tags: #ProxyShell-Schwachstelle #Keylogger #Passworte #Anmeldedaten #WindowsServer #Probleme #Update #ExchangeServer #Performance #Verbraucherdatenschutz #Datenschutz #Datensicherheit #Transparenz

Exchange 2019:- ProxyShell Exploit https://collaborationpro.com/exchange-2019-proxyshell-exploit/ #CVE-2021-34473, #Exchange2019, #KaliLinux, #Metasploit, #Msfconsole, #ProxyShell, #ProxyShellExploit

#ProxyShell & Co.: #Microsoft gibt Tipps, um #Exchange Server abzusichern | heise online https://www.heise.de/news/ProxyShell-Co-Microsoft-gibt-Tipps-um-Exchange-Server-abzusichern-7472639.html #MicrosoftExchange #ProxyNotShell

@buffaloverflow See also this writeup by @thezdi

Part 1: The #ProxyShell Path Confusion for Every User (CVE-2022-41040)

Part 2: #PowerShell Remoting Objects Conversions – Be Careful or Be Pwned (CVE-2022-41082)

https://www.thezdi.com/blog/2022/11/14/control-your-types-or-get-pwned-remote-code-execution-in-exchange-powershell-backend

New in #Metasploit this week: A WordPress #exploit, a vCenter privilege escalation, and a login scanner for Syncovery. This week's release also includes #ProxyShell improvements and the usual litany of bug squashing. https://www.rapid7.com/blog/post/2022/12/09/metasploit-wrap-up-156/

Remote Code Execution in Exchange PowerShell Backend - The details of CVE-2022-41040 and CVE-2022-41082
https://www.zerodayinitiative.com/blog/2022/11/14/control-your-types-or-get-pwned-remote-code-execution-in-exchange-powershell-backend
#ProxyShell #security #exchange #microsoft

Okay… Nur mal so zum Mitschreiben:
Bitte patcht #ProxyShell nicht nur sondern checkt die Server auf Backdoors und werft die Kisten unbedingt in eine sauber aufgebaute #DMZ! Ein Unternehmen ist vor wenigen Tagen verschlüsselt worden, weil die Angreifer einen entsprechenden Zugang gekauft haben.

📬 Windows Logo enthält Backdoor – Malware tarnt sich als Bild
#Hacking #Malware #ProxyLogon #ProxyShell #Steganografie #SymantecThreatHunterTeam #TA410 #WindowsLogo #Witchetty https://tarnkappe.info/artikel/hacking/windows-logo-enthaelt-backdoor-malware-tarnt-sich-als-bild-257020.html

La #Cybersecurity and Infrastructure Security Agency (#CISA) degli Stati Uniti ha emesso un avviso rivolto agli amministratori per gettare al cesso MSExchange e utilizzare server di posta più sicuri... Ah NO: solo per affrontare le vulnerabilità #ProxyShell sfruttate attivamente sui server Microsoft #Exchange locali.
Di Pierluigi #Paganini https://securityaffairs.co/wordpress/121395/security/cisa-alert-exchange-proxyshell-flaws.html