Exchange OWA zero-day: OWAReaper long-term access
A Russian-linked group used an Exchange OWA zero-day to deliver OWAReaper via half-click XSS emails. The malware can maintain mailbox access even after clean-up and credential changes.
A Russian-linked group used an Exchange OWA zero-day to deliver OWAReaper via half-click XSS emails. The malware can maintain mailbox access even after clean-up and credential changes.