{"id":33048,"date":"2020-03-11T16:00:28","date_gmt":"2020-03-11T16:00:28","guid":{"rendered":"https:\/\/www.retarus.com\/blog\/exchange-servers-increasingly-under-attack\/"},"modified":"2020-03-11T16:00:28","modified_gmt":"2020-03-11T16:00:28","slug":"exchange-servers-increasingly-under-attack","status":"publish","type":"post","link":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/","title":{"rendered":"Exchange Servers Increasingly Under Attack"},"content":{"rendered":" <p class=\"wp-block-paragraph\">Multiple groups of state-sponsored hackers are currently attacking a recently discovered vulnerability in Microsoft Exchange servers. <\/p>   <p class=\"wp-block-paragraph\">The attacks were first detected by Volexity, a British cyber-security firm. At the start of the week they were also confirmed <a href=\"https:\/\/www.zdnet.com\/article\/multiple-nation-state-groups-are-hacking-microsoft-exchange-servers\/\">to ZDNet<\/a> by a source at the US Department of Defense. According to the DOD source, \u201call the big players\u201d have been exploiting the vulnerability since a Microsoft patch on Tuesday, February 11. In IT circles, the resulting vulnerability is being tracked using the identifier CVE-2020-0688.<\/p>   <p class=\"wp-block-paragraph\">Not long after further details about the bug were revealed by the Zero-Day Initiative on February 26<sup>th<\/sup>, three proof-of-concept exploits had already found their way to GitHub, and a Metasploit module wasn\u2019t far behind. In the meanwhile, the respective APT groups (advanced persistent threats) have been targeting this vulnerability on servers which have not yet been secured with a patch provided by Microsoft. Of course, such attacks are not so easily carried out, as the hackers require at least one set of credentials for an email account on the Exchange server to exploit the bug \u2013 something that amateur hackers, also known as script kiddies, usually don\u2019t have access to. Unfortunately, credentials of accounts that are additionally protected by 2-factor authentication can also be used to exploit the vulnerability \u2013 without first having to bypass 2FA \u2026 <\/p>   <p class=\"wp-block-paragraph\">Exchange has become the predominant email server at companies. The current spate of attacks places practically all versions at risk (apart from Exchange Online included in Office 365, for which Microsoft installs its own patches). <\/p>   <p class=\"wp-block-paragraph\">With <a href=\"https:\/\/www.retarus.com\/it\/email-continuity\/\">Retarus Email Continuity<\/a> your business and all employees stay productive, even if your own email infrastructure becomes unavailable. When designing the service, we consciously opted for a technology which is not based on Microsoft products. In this way, we can ensure that your business can continue operating, even in the case of these systems failing or coming under sustained and targeted attack. <\/p> ","protected":false},"excerpt":{"rendered":"<p>Multiple groups of state-sponsored hackers are currently attacking a recently discovered vulnerability in Microsoft Exchange servers.<\/p>\n","protected":false},"author":14,"featured_media":15654,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ret_read_more_text":"","ret_thumb_border":false,"footnotes":""},"categories":[3061],"tags":[2684],"ret_content_type":[3096],"class_list":["post-33048","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sicurezza-della-posta-elettronica","tag-email-continuity","ret_content_type-notizie-dal-settore"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.8 (Yoast SEO v28.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Exchange Servers Increasingly Under Attack<\/title>\n<meta name=\"description\" content=\"Multiple groups of state-sponsored hackers are currently attacking a recently discovered vulnerability in Microsoft Exchange servers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Exchange Servers Increasingly Under Attack\" \/>\n<meta property=\"og:description\" content=\"Multiple groups of state-sponsored hackers are currently attacking a recently discovered vulnerability in Microsoft Exchange servers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/\" \/>\n<meta property=\"og:site_name\" content=\"Retarus Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/retarus\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-11T16:00:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.retarus.com\/blog-transfer\/wp-content\/uploads\/sites\/41\/2026\/07\/webmailblurred-15.png\" \/>\n\t<meta property=\"og:image:width\" content=\"834\" \/>\n\t<meta property=\"og:image:height\" content=\"442\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Thomas Cloer\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@retarus\" \/>\n<meta name=\"twitter:site\" content=\"@retarus\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Thomas Cloer\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/\"},\"author\":{\"name\":\"Thomas Cloer\",\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/#\\\/schema\\\/person\\\/7f8954d8bf84d75cf384942c5f6cf2e5\"},\"headline\":\"Exchange Servers Increasingly Under Attack\",\"datePublished\":\"2020-03-11T16:00:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/\"},\"wordCount\":321,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/41\\\/2026\\\/07\\\/webmailblurred-15.png\",\"keywords\":[\"Email Continuity\"],\"articleSection\":[\"Sicurezza della posta elettronica\"],\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/\",\"url\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/\",\"name\":\"Exchange Servers Increasingly Under Attack\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/41\\\/2026\\\/07\\\/webmailblurred-15.png\",\"datePublished\":\"2020-03-11T16:00:28+00:00\",\"description\":\"Multiple groups of state-sponsored hackers are currently attacking a recently discovered vulnerability in Microsoft Exchange servers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/41\\\/2026\\\/07\\\/webmailblurred-15.png\",\"contentUrl\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/41\\\/2026\\\/07\\\/webmailblurred-15.png\",\"width\":834,\"height\":442},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/exchange-servers-increasingly-under-attack\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Exchange Servers Increasingly Under Attack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/#website\",\"url\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/\",\"name\":\"Retarus Blog\",\"description\":\"Enterprise Communication &amp; Cybersecurity\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/#organization\",\"name\":\"retarus GmbH\",\"alternateName\":\"retarus Inc.\",\"url\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/41\\\/2026\\\/08\\\/retarus_logo_2025.png\",\"contentUrl\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/41\\\/2026\\\/08\\\/retarus_logo_2025.png\",\"width\":696,\"height\":696,\"caption\":\"retarus GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/retarus\",\"https:\\\/\\\/x.com\\\/retarus\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/retarus\"],\"telephone\":\"+49 89 5528 0000\",\"foundingDate\":\"1992-12-02\",\"vatID\":\"DE811459192\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.retarus.com\\\/blog\\\/it\\\/#\\\/schema\\\/person\\\/7f8954d8bf84d75cf384942c5f6cf2e5\",\"name\":\"Thomas Cloer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/40f29e635bf20bec8e4585fa9ffbe6cd78538b4490bdb632b1d83eea415593b3?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/40f29e635bf20bec8e4585fa9ffbe6cd78538b4490bdb632b1d83eea415593b3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/40f29e635bf20bec8e4585fa9ffbe6cd78538b4490bdb632b1d83eea415593b3?s=96&d=mm&r=g\",\"caption\":\"Thomas Cloer\"},\"jobTitle\":\"Corporate Blogger\",\"worksFor\":\"retarus GmbH\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Exchange Servers Increasingly Under Attack","description":"Multiple groups of state-sponsored hackers are currently attacking a recently discovered vulnerability in Microsoft Exchange servers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/","og_locale":"it_IT","og_type":"article","og_title":"Exchange Servers Increasingly Under Attack","og_description":"Multiple groups of state-sponsored hackers are currently attacking a recently discovered vulnerability in Microsoft Exchange servers.","og_url":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/","og_site_name":"Retarus Blog","article_publisher":"https:\/\/www.facebook.com\/retarus","article_published_time":"2020-03-11T16:00:28+00:00","og_image":[{"width":834,"height":442,"url":"https:\/\/www.retarus.com\/blog-transfer\/wp-content\/uploads\/sites\/41\/2026\/07\/webmailblurred-15.png","type":"image\/png"}],"author":"Thomas Cloer","twitter_card":"summary_large_image","twitter_creator":"@retarus","twitter_site":"@retarus","twitter_misc":{"Scritto da":"Thomas Cloer","Tempo di lettura stimato":"2 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/#article","isPartOf":{"@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/"},"author":{"name":"Thomas Cloer","@id":"https:\/\/www.retarus.com\/blog\/it\/#\/schema\/person\/7f8954d8bf84d75cf384942c5f6cf2e5"},"headline":"Exchange Servers Increasingly Under Attack","datePublished":"2020-03-11T16:00:28+00:00","mainEntityOfPage":{"@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/"},"wordCount":321,"commentCount":0,"publisher":{"@id":"https:\/\/www.retarus.com\/blog\/it\/#organization"},"image":{"@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/www.retarus.com\/blog\/wp-content\/uploads\/sites\/41\/2026\/07\/webmailblurred-15.png","keywords":["Email Continuity"],"articleSection":["Sicurezza della posta elettronica"],"inLanguage":"it-IT","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/","url":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/","name":"Exchange Servers Increasingly Under Attack","isPartOf":{"@id":"https:\/\/www.retarus.com\/blog\/it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/#primaryimage"},"image":{"@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/#primaryimage"},"thumbnailUrl":"https:\/\/www.retarus.com\/blog\/wp-content\/uploads\/sites\/41\/2026\/07\/webmailblurred-15.png","datePublished":"2020-03-11T16:00:28+00:00","description":"Multiple groups of state-sponsored hackers are currently attacking a recently discovered vulnerability in Microsoft Exchange servers.","breadcrumb":{"@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/#primaryimage","url":"https:\/\/www.retarus.com\/blog\/wp-content\/uploads\/sites\/41\/2026\/07\/webmailblurred-15.png","contentUrl":"https:\/\/www.retarus.com\/blog\/wp-content\/uploads\/sites\/41\/2026\/07\/webmailblurred-15.png","width":834,"height":442},{"@type":"BreadcrumbList","@id":"https:\/\/www.retarus.com\/blog\/it\/exchange-servers-increasingly-under-attack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.retarus.com\/blog\/it\/"},{"@type":"ListItem","position":2,"name":"Exchange Servers Increasingly Under Attack"}]},{"@type":"WebSite","@id":"https:\/\/www.retarus.com\/blog\/it\/#website","url":"https:\/\/www.retarus.com\/blog\/it\/","name":"Retarus Blog","description":"Enterprise Communication &amp; Cybersecurity","publisher":{"@id":"https:\/\/www.retarus.com\/blog\/it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.retarus.com\/blog\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/www.retarus.com\/blog\/it\/#organization","name":"retarus GmbH","alternateName":"retarus Inc.","url":"https:\/\/www.retarus.com\/blog\/it\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.retarus.com\/blog\/it\/#\/schema\/logo\/image\/","url":"https:\/\/www.retarus.com\/blog\/wp-content\/uploads\/sites\/41\/2026\/08\/retarus_logo_2025.png","contentUrl":"https:\/\/www.retarus.com\/blog\/wp-content\/uploads\/sites\/41\/2026\/08\/retarus_logo_2025.png","width":696,"height":696,"caption":"retarus GmbH"},"image":{"@id":"https:\/\/www.retarus.com\/blog\/it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/retarus","https:\/\/x.com\/retarus","https:\/\/www.linkedin.com\/company\/retarus"],"telephone":"+49 89 5528 0000","foundingDate":"1992-12-02","vatID":"DE811459192"},{"@type":"Person","@id":"https:\/\/www.retarus.com\/blog\/it\/#\/schema\/person\/7f8954d8bf84d75cf384942c5f6cf2e5","name":"Thomas Cloer","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/40f29e635bf20bec8e4585fa9ffbe6cd78538b4490bdb632b1d83eea415593b3?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/40f29e635bf20bec8e4585fa9ffbe6cd78538b4490bdb632b1d83eea415593b3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/40f29e635bf20bec8e4585fa9ffbe6cd78538b4490bdb632b1d83eea415593b3?s=96&d=mm&r=g","caption":"Thomas Cloer"},"jobTitle":"Corporate Blogger","worksFor":"retarus GmbH"}]}},"_links":{"self":[{"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/posts\/33048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/comments?post=33048"}],"version-history":[{"count":0,"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/posts\/33048\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/media\/15654"}],"wp:attachment":[{"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/media?parent=33048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/categories?post=33048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/tags?post=33048"},{"taxonomy":"ret_content_type","embeddable":true,"href":"https:\/\/www.retarus.com\/blog\/it\/wp-json\/wp\/v2\/ret_content_type?post=33048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}