CISA has published a malware analysis report with compromise indicators and Sigma rules for "ToolShell" attacks targeting ...

"In an Exchange hybrid deployment, an attacker who first gains administrative access to an on-premises Exchange server could ...