Tag: exchange zero day

Russian Hackers Exploit Exchange Zero-Day for Long-Term Mailbox Access

Russian hackers have unleashed a powerful tool, dubbed OWAReaper, exploiting a zero-day flaw in Exchange Outlook Web Access to gain long-term access to mailboxes, with Proofpoint hailing it as the most sophisticated backdoor delivered via half-click exploits they've ever seen. The attack, linked to the Russian state-sponsored group Laundry Bear, cleverly uses a cross-site scripting flaw to execute arbitrary JavaScript in victims' browsers.