attack.g0125 | Detection.FYI

Exchange Exploitation Used by HAFNIUM

Aug 12, 2024 · attack.initial-access attack.t1190 attack.g0125 detection.emerging-threats ·
Share on:

Detects exploitation attempts in Exchange server logs as described in blog posts reporting on HAFNIUM group activity

Read More
HAFNIUM Exchange Exploitation Activity

Aug 12, 2024 · attack.persistence attack.t1546 attack.t1053 attack.g0125 detection.emerging-threats ·
Share on:

Detects activity observed by different researchers to be HAFNIUM group activity (or related) on Exchange servers

Read More