Security News > 2021 > June > Microsoft Exchange Server vulnerabilities, ransomware lead spring 2021 cyberattack trends

Cisco's Talos team said 35% of incidents led back to Microsoft Exchange Server vulnerabilities reported early in 2021, but new ransomware families have been appearing to fill the Emotet hole, too.

Cisco's Talos Intelligence Group has released its incident response trends report for spring 2021, and found that Microsoft Exchange Server vulnerabilities reported in early 2021 were the most detected incident over the past three months.

Talos said the four Exchange Server vulnerabilities, which now have a patch, comprised 35% of all incident investigations.

In addition to widespread Exchange Server attacks, Talos said it also noticed a "Persistent and growing" ransomware threat despite the January takedown of the Emotet botnet, which was often used to launch ransomware-as-a-service attacks.

Ransomware families MountLocker, Zeppelin and Avaddon were all newly detected in spring 2021, Talos said, and all fit the ransomware-as-a-service model used by Emotet.

Talos said that most of its energy was committed to working on Microsoft Exchange Server vulnerabilities, but it also reports that the majority only resulted in scanning attempts and HTTP POST requests without any post-exploitation evidence.

News URL

https://www.techrepublic.com/article/microsoft-exchange-server-vulnerabilities-ransomware-lead-spring-2021-cyberattack-trends/#ftag=RSS56d97e7