Microsoft Exchange ProxyShell exploits used to deploy Babuk ransomware

The ProxyShell attacks against vulnerable Microsoft Exchange servers started several months ago, with LockFile and Conti being among the first ransomware groups to exploit them.