Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

By Ionut Ilascu

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor called OWAReaper. [...]