FBI TLP White PIN: FBI Disrupts Cyber Actors’ Exploitation of Microsoft Exchange Server Vulnerabilities April 13, 2021
April 13, 2021
PIN Number
20210413-002
On 13 April 2021, the Federal Bureau of Investigation (FBI) conducted a court-authorized operation to remove hundreds of malicious web shells from vulnerable servers in the United States in response to the widespread exploitation of critical Microsoft Exchange Server (MES) vulnerabilities by malicious cyber actors. The servers ran on-premises versions of MES, a software used to provide enterprise-level e-mail service. This is unrelated to Microsoft’s 13 April announcement of security updates for additional MES vulnerabilities. View the entire report below.
For help with Cybersecurity and Risk Advisory Services exclusively for AHA members, contact:
John Riggi
Senior Advisor for Cybersecurity and Risk, AHA
jriggi@aha.org
(O) +1 202 626 2272
Key Resources
Related Resources
Special Bulletin
Guides/Reports