Threat Actor HAFNIUM Found Targeting Exchange Servers with Zero-Day Exploits

Microsoft Threat Intelligence Center (MSTIC) attributes this campaign with high confidence to HAFNIUM, a group assessed to be state-sponsored and operating out of China, based on observed victimology, tactics, and procedures.