Microsoft Exchange Vulnerabilities Abused for Babuk Ransomware Infections

Researchers assess with moderate confidence that the initial infection vector is the exploitation of ProxyShell flaws in Microsoft Exchange Server through the deployment of China Chopper web shell.