Hackers Hijack Email Reply Chains on Unpatched Exchange Servers to Spread IcedID Malware

A new email phishing campaign has been spotted leveraging the tactic of conversation hijacking to deliver the IcedID info-stealing malware onto infected machines by making use of unpatched and publicly-exposed Microsoft Exchange servers.