{"id":4440,"date":"2020-03-11T18:00:28","date_gmt":"2020-03-11T16:00:28","guid":{"rendered":"https:\/\/www.retarus.com\/blog\/en\/exchange-servers-increasingly-under-attack"},"modified":"2024-05-07T13:19:15","modified_gmt":"2024-05-07T11:19:15","slug":"exchange-servers-increasingly-under-attack","status":"publish","type":"post","link":"https:\/\/www.retarus.com\/blog\/en\/exchange-servers-increasingly-under-attack\/","title":{"rendered":"Exchange Servers Increasingly Under Attack"},"content":{"rendered":"\n<p>Multiple groups of state-sponsored hackers\nare currently attacking a recently discovered vulnerability in Microsoft\nExchange servers. <\/p>\n\n\n\n<p>The attacks were first detected by Volexity,\na British cyber-security firm. At the start of the week they were also\nconfirmed <a href=\"https:\/\/www.zdnet.com\/article\/multiple-nation-state-groups-are-hacking-microsoft-exchange-servers\/\">to\nZDNet<\/a> by a source at the US Department of Defense. According to the DOD\nsource, \u201call the big players\u201d have been exploiting the vulnerability since a\nMicrosoft patch on Tuesday, February 11. In IT circles, the resulting vulnerability\nis being tracked using the identifier CVE-2020-0688.<\/p>\n\n\n\n<p>Not long after further details about the bug\nwere revealed by the Zero-Day Initiative on February 26<sup>th<\/sup>, three\nproof-of-concept exploits had already found their way to GitHub, and a\nMetasploit module wasn\u2019t far behind. In the meanwhile, the respective APT groups\n(advanced persistent threats) have been targeting this vulnerability on servers\nwhich have not yet been secured with a patch provided by Microsoft. Of course,\nsuch attacks are not so easily carried out, as the hackers require at least one\nset of credentials for an email account on the Exchange server to exploit the\nbug \u2013 something that amateur hackers, also known as script kiddies, usually\ndon\u2019t have access to. Unfortunately, credentials of accounts that are\nadditionally protected by 2-factor authentication can also be used to exploit\nthe vulnerability \u2013 without first having to bypass 2FA \u2026 <\/p>\n\n\n\n<p>Exchange has become the predominant email server at companies. The current spate of attacks places practically all versions at risk (apart from Exchange Online included in Office 365, for which Microsoft installs its own patches). <\/p>\n\n\n\n<p>With <a href=\"https:\/\/www.retarus.com\/email-continuity\/\">Retarus Email Continuity<\/a> your business and all employees stay productive, even if your own email infrastructure becomes unavailable. When designing the service, we consciously opted for a technology which is not based on Microsoft products. In this way, we can ensure that your business can continue operating, even in the case of these systems failing or coming under sustained and targeted attack.  <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Multiple groups of state-sponsored hackers are currently attacking a recently discovered vulnerability in Microsoft Exchange servers. <\/p>\n","protected":false},"author":14,"featured_media":10287,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","_s2mail":"","footnotes":""},"categories":[8,15],"tags":[2927],"dipi_cpt_category":[],"class_list":["post-4440","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-security","tag-email-continuity"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.7 (Yoast SEO v24.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Exchange-Sicherheitsl\u00fccke: Server verst\u00e4rkt unter Beschuss<\/title>\n<meta name=\"description\" content=\"Exchange-Sicherheitsl\u00fccke: Mit Retarus Email Continuity bleiben Ihre Mitarbeiter auch dann produktiv, wenn Ihre Infrastruktur nicht zur Verf\u00fcgung steht.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Exchange Servers Increasingly Under Attack\" \/>\n<meta property=\"og:description\" content=\"Exchange-Sicherheitsl\u00fccke: Mit Retarus Email Continuity bleiben Ihre Mitarbeiter auch dann produktiv, wenn Ihre Infrastruktur nicht zur Verf\u00fcgung steht.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/\" \/>\n<meta property=\"og:site_name\" content=\"Retarus Corporate Blog - EN\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-11T16:00:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-07T11:19:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/webmailblurred.png\" \/>\n\t<meta property=\"og:image:width\" content=\"834\" \/>\n\t<meta property=\"og:image:height\" content=\"470\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Thomas Cloer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Thomas Cloer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/\",\"url\":\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/\",\"name\":\"Exchange-Sicherheitsl\u00fccke: Server verst\u00e4rkt unter Beschuss\",\"isPartOf\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/webmailblurred.png\",\"datePublished\":\"2020-03-11T16:00:28+00:00\",\"dateModified\":\"2024-05-07T11:19:15+00:00\",\"author\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/#\/schema\/person\/7f8954d8bf84d75cf384942c5f6cf2e5\"},\"description\":\"Exchange-Sicherheitsl\u00fccke: Mit Retarus Email Continuity bleiben Ihre Mitarbeiter auch dann produktiv, wenn Ihre Infrastruktur nicht zur Verf\u00fcgung steht.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#primaryimage\",\"url\":\"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/webmailblurred.png\",\"contentUrl\":\"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/webmailblurred.png\",\"width\":834,\"height\":470},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.retarus.com\/blog\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Exchange Servers Increasingly Under Attack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/#website\",\"url\":\"https:\/\/www.retarus.com\/blog\/en\/\",\"name\":\"Retarus Corporate Blog - EN\",\"description\":\"Always up to date\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.retarus.com\/blog\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.retarus.com\/blog\/en\/#\/schema\/person\/7f8954d8bf84d75cf384942c5f6cf2e5\",\"name\":\"Thomas Cloer\",\"url\":\"https:\/\/www.retarus.com\/blog\/en\/author\/thomasc\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Exchange-Sicherheitsl\u00fccke: Server verst\u00e4rkt unter Beschuss","description":"Exchange-Sicherheitsl\u00fccke: Mit Retarus Email Continuity bleiben Ihre Mitarbeiter auch dann produktiv, wenn Ihre Infrastruktur nicht zur Verf\u00fcgung steht.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/","og_locale":"en_US","og_type":"article","og_title":"Exchange Servers Increasingly Under Attack","og_description":"Exchange-Sicherheitsl\u00fccke: Mit Retarus Email Continuity bleiben Ihre Mitarbeiter auch dann produktiv, wenn Ihre Infrastruktur nicht zur Verf\u00fcgung steht.","og_url":"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/","og_site_name":"Retarus Corporate Blog - EN","article_published_time":"2020-03-11T16:00:28+00:00","article_modified_time":"2024-05-07T11:19:15+00:00","og_image":[{"width":834,"height":470,"url":"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/webmailblurred.png","type":"image\/png"}],"author":"Thomas Cloer","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Thomas Cloer","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/","url":"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/","name":"Exchange-Sicherheitsl\u00fccke: Server verst\u00e4rkt unter Beschuss","isPartOf":{"@id":"https:\/\/www.retarus.com\/blog\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#primaryimage"},"image":{"@id":"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#primaryimage"},"thumbnailUrl":"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/webmailblurred.png","datePublished":"2020-03-11T16:00:28+00:00","dateModified":"2024-05-07T11:19:15+00:00","author":{"@id":"https:\/\/www.retarus.com\/blog\/en\/#\/schema\/person\/7f8954d8bf84d75cf384942c5f6cf2e5"},"description":"Exchange-Sicherheitsl\u00fccke: Mit Retarus Email Continuity bleiben Ihre Mitarbeiter auch dann produktiv, wenn Ihre Infrastruktur nicht zur Verf\u00fcgung steht.","breadcrumb":{"@id":"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#primaryimage","url":"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/webmailblurred.png","contentUrl":"https:\/\/www.retarus.com\/blog\/en\/wp-content\/uploads\/sites\/22\/2024\/05\/webmailblurred.png","width":834,"height":470},{"@type":"BreadcrumbList","@id":"https:\/\/www.retarus.com\/blog\/en\/exchange-server-verstaerkt-unter-beschuss\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.retarus.com\/blog\/en\/"},{"@type":"ListItem","position":2,"name":"Exchange Servers Increasingly Under Attack"}]},{"@type":"WebSite","@id":"https:\/\/www.retarus.com\/blog\/en\/#website","url":"https:\/\/www.retarus.com\/blog\/en\/","name":"Retarus Corporate Blog - EN","description":"Always up to date","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.retarus.com\/blog\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.retarus.com\/blog\/en\/#\/schema\/person\/7f8954d8bf84d75cf384942c5f6cf2e5","name":"Thomas Cloer","url":"https:\/\/www.retarus.com\/blog\/en\/author\/thomasc\/"}]}},"_links":{"self":[{"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/posts\/4440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/comments?post=4440"}],"version-history":[{"count":5,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/posts\/4440\/revisions"}],"predecessor-version":[{"id":10537,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/posts\/4440\/revisions\/10537"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/media\/10287"}],"wp:attachment":[{"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/media?parent=4440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/categories?post=4440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/tags?post=4440"},{"taxonomy":"dipi_cpt_category","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/en\/wp-json\/wp\/v2\/dipi_cpt_category?post=4440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}