https://www.bleepingcomputer.com/news/security/microsoft-hackers-turn-exchange-servers-into-malware-control-centers/
Microsoft and the Ukraine CERT warn of new attacks by the Russian state-sponsored Turla hacking group, targeting the defense industry and Microsoft Exchange servers with a new 'DeliveryCheck' malware backdoor.
What's the bigger opinion on this. Is MS pushing onPrem Exchange as rotten apple to encourage the shift to 365 or are they genuinely pushing this info out for Administration awareness?
I would assume at this point any Orgs using onPrem are needing the services and thus assume it's for awareness?
They don’t give a shit about on prem anymore. Which while disappointing is fine with me. Some companies really need it for various reasons and that means the dwindling number of good admins will have good jobs until retirement.
Please, help me to understand something about MS Office.
Why the hell you can run a macro in a spreadsheet that can execute arbitrary PowerShell scripts? Why is that feature needed for MS Office users? Is it too hard that it just do stuff inside the spreadsheet and nothing else?
This doesn’t make a lot of sense to me. No on prem Exchange admin worth a damn is reading emails on the server, or reading their email and opening excel files and enabling macros in them using their admin account for that matter. The bare minimum of security practices will stop this thing before it ever gets started.