{"id":46052,"date":"2021-03-25T03:04:00","date_gmt":"2021-03-25T07:04:00","guid":{"rendered":"http:\/\/blog.cybercon1.com\/?p=46052"},"modified":"2021-03-25T03:04:00","modified_gmt":"2021-03-25T07:04:00","slug":"dearcry-ransomware-unleashed-in-microsoft-exchange-hack","status":"publish","type":"post","link":"https:\/\/www.cyberconservices.com\/index.php\/2021\/03\/25\/dearcry-ransomware-unleashed-in-microsoft-exchange-hack\/","title":{"rendered":"DearCry Ransomware Unleashed In Microsoft Exchange Hack"},"content":{"rendered":"\n

Not that this real news to anyone paying attention to tech but it is not just about the hack. The real point here is there are far to many servers out there that cannot be patched because they are too old. Unfortunately many organizations look on IT infrastructure as a buy and forget proposition. Until something crashes they do not see the value in investing additional resources for maintenance and will not replace the hardware until it goes belly up. This short-sighted approach only allow hacks like this one to have a greater impact than it would with appropriate hardware and OS refresh cycles, proper maintenance and of course end point security. <\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Adversaries are deploying DearCry ransomware<\/strong> on victim systems after hacking into on-premise Microsoft Exchange <\/strong>servers that remain unpatched, Microsoft acknowledged late Thursday.<\/p>\n\n\n\n

\u201cMicrosoft observed a new family of human operated ransomware attack customers,\u201d Microsoft Security Program Manager Phillip Misner tweeted at 9:19 p.m. ET Thursday. \u201cHuman operated ransomware attacks are utilizing the Microsoft Exchange<\/strong> vulnerabilities to exploit customers.\u201d<\/p>\n\n\n\n

Misner\u2019s tweet came less than two hours after BleepingComputer reported that threat actors were taking advantage of new zero-day ProxyLogin vulnerabilities in Microsoft Exchange<\/strong> servers<\/a> to install the DearCry ransomware. Microsoft Defender customers who receive automatic updates are now protected against this ransomware<\/strong> without having to take any action, according to Microsoft Security Intelligence.<\/p>\n\n\n\n

\u201cWe have detected and are now blocking a new family of ransomware <\/strong>being used after an initial compromise of unpatched on-premises Exchange<\/strong> Servers,\u201d Microsoft Security Intelligence tweeted to 11:53 p.m. ET Thursday. \u201cMicrosoft protects against this threat known as \u2026 DearCry.\u201d Read On:<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Not that this real news to anyone paying attention to tech but it is not just about the hack. The real point here is there are far to many servers out there that cannot be patched because they are too old. Unfortunately many organizations look on IT infrastructure as a buy and forget proposition. Until […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[12,636],"tags":[183,637],"class_list":["post-46052","post","type-post","status-publish","format-standard","hentry","category-exchange","category-ransomware","tag-exchange","tag-ransomware"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t