{"id":39938,"date":"2023-03-27T18:49:20","date_gmt":"2023-03-27T18:49:20","guid":{"rendered":"https:\/\/thedailyherald.co.uk\/uncategorized\/microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again\/"},"modified":"2023-03-27T18:49:20","modified_gmt":"2023-03-27T18:49:20","slug":"microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again","status":"publish","type":"post","link":"https:\/\/thedailyherald.co.uk\/tech\/microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again\/","title":{"rendered":"Microsoft Exchange ProxyShell is being exploited to mine crypto once again"},"content":{"rendered":"<p>Home News Computing (Image credit: Shutterstock \/ Wit Olszewksi) Hackers are using known ProxyShell vulnerabilities to install cryptocurrency miners on vulnerable Microsoft Exchange servers, researchers have claimed.Cybersecurity experts from Morphisec observed unidentified attackers using ProxyShell (an umbrella term for multiple vulnerabilities that, when chained together, allow for remote code execution) to install XMRig on Microsoft Exchange servers.XMRig is one of the most popular cryptocurrency mining malware variants, generating the Monero (XMR) cryptocurrency for attackers. M&#8230; Click below to read the full story from TechRadar<br \/><a href=\"https:\/\/www.techradar.com\/news\/microsoft-exchange-proxyshell-is-being-exploited-again\" class=\"button purchase\" rel=\"nofollow noopener\" target=\"_blank\">Read More<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Home News Computing (Image credit: Shutterstock \/ Wit Olszewksi) Hackers are using known ProxyShell vulnerabilities to install cryptocurrency miners on vulnerable Microsoft Exchange servers, researchers have claimed.Cybersecurity experts from Morphisec observed unidentified attackers using ProxyShell (an umbrella term for multiple vulnerabilities that, when chained together, allow for remote code execution) to install XMRig on Microsoft&hellip;<\/p>\n","protected":false},"author":1534,"featured_media":39939,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[35],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v15.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Microsoft Exchange ProxyShell is being exploited to mine crypto once again - The Daily Herald<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/thedailyherald.co.uk\/uncategorized\/microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Exchange ProxyShell is being exploited to mine crypto once again - The Daily Herald\" \/>\n<meta property=\"og:description\" content=\"Home News Computing (Image credit: Shutterstock \/ Wit Olszewksi) Hackers are using known ProxyShell vulnerabilities to install cryptocurrency miners on vulnerable Microsoft Exchange servers, researchers have claimed.Cybersecurity experts from Morphisec observed unidentified attackers using ProxyShell (an umbrella term for multiple vulnerabilities that, when chained together, allow for remote code execution) to install XMRig on Microsoft&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/thedailyherald.co.uk\/uncategorized\/microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again\/\" \/>\n<meta property=\"og:site_name\" content=\"The Daily Herald\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-27T18:49:20+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\">\n\t<meta name=\"twitter:data1\" content=\"Alejandro Wrona\">\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\">\n\t<meta name=\"twitter:data2\" content=\"0 minutes\">\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/thedailyherald.co.uk\/#website\",\"url\":\"https:\/\/thedailyherald.co.uk\/\",\"name\":\"The Daily Herald\",\"description\":\"Your Super Aggregated News, Blog &amp; Magazine\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/thedailyherald.co.uk\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/thedailyherald.co.uk\/uncategorized\/microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/thedailyherald.co.uk\/wp-content\/uploads\/2023\/03\/39938-microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again.jpg\",\"width\":970,\"height\":545,\"caption\":\"Microsoft Exchange ProxyShell is being exploited to mine crypto once again\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/thedailyherald.co.uk\/uncategorized\/microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again\/#webpage\",\"url\":\"https:\/\/thedailyherald.co.uk\/uncategorized\/microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again\/\",\"name\":\"Microsoft Exchange ProxyShell is being exploited to mine crypto once again - The Daily Herald\",\"isPartOf\":{\"@id\":\"https:\/\/thedailyherald.co.uk\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/thedailyherald.co.uk\/uncategorized\/microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again\/#primaryimage\"},\"datePublished\":\"2023-03-27T18:49:20+00:00\",\"dateModified\":\"2023-03-27T18:49:20+00:00\",\"author\":{\"@id\":\"https:\/\/thedailyherald.co.uk\/#\/schema\/person\/4d31a4a571f2d3c9f2eaf7eecf670d05\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/thedailyherald.co.uk\/uncategorized\/microsoft-exchange-proxyshell-is-being-exploited-to-mine-crypto-once-again\/\"]}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/thedailyherald.co.uk\/#\/schema\/person\/4d31a4a571f2d3c9f2eaf7eecf670d05\",\"name\":\"Alejandro Wrona\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/thedailyherald.co.uk\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4dcbc29cb4314bf10f4e61405b70cb6f?s=96&d=mm&r=g\",\"caption\":\"Alejandro Wrona\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","amp_validity":null,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/posts\/39938"}],"collection":[{"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/users\/1534"}],"replies":[{"embeddable":true,"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/comments?post=39938"}],"version-history":[{"count":0,"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/posts\/39938\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/media\/39939"}],"wp:attachment":[{"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/media?parent=39938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/categories?post=39938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedailyherald.co.uk\/wp-json\/wp\/v2\/tags?post=39938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}