Ongoing Campaign Leveraging Exchange Vulnerability Potentially Linked to Iran

Analysis by Secureworks CTU researchers suggests that an Iranian threat group, possibly Oilrig, was responsible for the activity that started with the compromise of the Exchange Servers.