Lemon Duck spreads its wings: Actors target Microsoft Exchange servers, incorporate new TTPs

Lemon Duck remains relevant as the operators begin to target Microsoft Exchange servers, exploiting high-profile security vulnerabilities to drop web shells and carry out malicious activities.