ANL 34.10 Decreased By ▼ -0.15 (-0.44%)
ASC 13.65 Increased By ▲ 0.30 (2.25%)
ASL 23.40 Increased By ▲ 0.80 (3.54%)
AVN 85.60 Increased By ▲ 1.90 (2.27%)
BOP 7.70 No Change ▼ 0.00 (0%)
BYCO 9.44 Increased By ▲ 0.07 (0.75%)
DGKC 111.51 Increased By ▲ 1.31 (1.19%)
EPCL 48.99 Decreased By ▼ -1.90 (-3.73%)
FCCL 22.85 Increased By ▲ 0.09 (0.4%)
FFBL 25.47 Decreased By ▼ -0.23 (-0.89%)
FFL 15.33 Increased By ▲ 0.03 (0.2%)
HASCOL 8.94 Decreased By ▼ -0.06 (-0.67%)
HUBC 78.43 Decreased By ▼ -0.57 (-0.72%)
HUMNL 6.13 Increased By ▲ 0.29 (4.97%)
JSCL 19.14 Increased By ▲ 0.44 (2.35%)
KAPCO 40.50 Increased By ▲ 1.11 (2.82%)
KEL 3.72 Increased By ▲ 0.04 (1.09%)
LOTCHEM 14.20 Decreased By ▼ -0.15 (-1.05%)
MLCF 42.75 Increased By ▲ 0.45 (1.06%)
PAEL 30.90 Decreased By ▼ -0.17 (-0.55%)
PIBTL 9.52 Increased By ▲ 0.07 (0.74%)
POWER 8.61 Increased By ▲ 0.17 (2.01%)
PPL 82.50 Decreased By ▼ -0.80 (-0.96%)
PRL 23.09 Increased By ▲ 0.32 (1.41%)
PTC 9.00 Decreased By ▼ -0.20 (-2.17%)
SILK 1.38 Decreased By ▼ -0.02 (-1.43%)
SNGP 38.90 Increased By ▲ 0.31 (0.8%)
TRG 165.00 Increased By ▲ 1.78 (1.09%)
UNITY 35.80 Increased By ▲ 0.87 (2.49%)
WTL 1.53 Increased By ▲ 0.08 (5.52%)
BR100 4,846 Increased By ▲ 46.43 (0.97%)
BR30 24,817 Increased By ▲ 123.55 (0.5%)
KSE100 45,175 Increased By ▲ 231.06 (0.51%)
KSE30 18,470 Increased By ▲ 86.89 (0.47%)

Coronavirus
VERY HIGH
Pakistan Deaths
18,993
7824hr
Pakistan Cases
861,473
344724hr
Sindh
292,644
Punjab
319,365
Balochistan
23,447
Islamabad
78,200
KPK
124,484
Technology

Microsoft defends against new threat to Exchange

  • US Justice Department officials on Tuesday announced that, with backing from a court, they purged "malicious web shells" hackers had planted in hundreds of computers running Exchange Server software.
14 Apr 2021

SAN FRANCISCO: Microsoft on Tuesday moved to defend against a dangerous new threat to Exchange email servers while the fight continued against hackers taking advantage of a flaw patched last month.

The US Cybersecurity and Infrastructure Security Agency, part of the Department of Homeland Security, called on government departments to immediately install the latest software update released by Microsoft.

"These vulnerabilities pose an unacceptable risk to the Federal enterprise and require an immediate and emergency action," CISA said in a notice.

"This determination is based on the likelihood of the vulnerabilities being weaponized, combined with the widespread use of the affected software across the Executive Branch and high potential for a compromise of integrity and confidentiality of agency information."

Both CISA and Microsoft said it did not appear that hackers had taken advantage of the newly discovered weakness to break into Exchange email systems.

"Although we are not aware of any active exploits in the wild, our recommendation is to install these updates immediately to protect your environment," Microsoft said in a post about the patch.

CISA and Microsoft said that the vulnerabilities were different from those fixed last month, when the US tech company disclosed that a state-sponsored hacking group operating out of China was exploiting security flaws in its Exchange email services to steal data from business users.

The company said the hacking group, which it has named "Hafnium," is a "highly skilled and sophisticated actor."

Hafnium has in the past targeted US-based companies including infectious disease researchers, law firms, universities, defence contractors, think tanks and NGOs.

The potentially devastating hack is believed to have affected at least 30,000 Microsoft email servers in government and private networks and has prompted calls for a firm response to state-sponsored attacks which could involve "hacking back" or other measures.

Microsoft in March released updates to fix the security flaws, which apply to on-premises versions of the software rather than cloud-based versions, and urged customers to apply them.

US Justice Department officials on Tuesday announced that, with backing from a court, they purged "malicious web shells" hackers had planted in hundreds of computers running Exchange Server software.

Web shells are bits of computer code that allow hackers to reach into computers remotely, and had been planted early this year by taking advantage of a weakness in Exchange, according to a Justice Department release.

"Today's operation removed one early hacking group's remaining web shells, which could have been used to maintain and escalate persistent, unauthorized access to US networks," Justice Department officials said.