Insights into Adversaries Exploiting On-Prem Exchange Vulnerabilities

Between 27 February through March 2021, CrowdStrike Intelligence observed the exploitation of Microsoft on-prem Exchange servers against dozens of victims. These victims are spread across a number of verticals with a heavy focus on organizations located in North America. CrowdStrike has uncovered at least six China-nexus adversaries and at least one e-Crime actor leveraging access to vulnerable Microsoft Exchange servers during this time frame.

We invite you to participate in a threat briefing that will focus on recent adversary activities involving Microsoft on-prem Exchange exploitation and China-nexus cyber operations.

**Emerging Threat: Access Brokers & the Implications to State & Federal Government Entities webinar has been rescheduled for May 11 at 1:00 P.M. ET. Register here, https://attendee.gotowebinar.com/register/3974086236046895372.**