Russian botnet group called Prometei is exploiting unpatched Microsoft Exchange Server vulnerabilities to mine cryptocurrency. The Russian group has targeted companies across the U.S., U.K., Germany, Germany, France, Spain, Italy and other European countries, Cybereason says. Four vulnerabilities in on-premises Microsoft Exchange servers were revealed by the company on March 2 after it issued emergency patches. In addition to APT groups, ransomware groups Black Kingdom and DearCry were reported to also be exploiting the flaw.”]
Source: https://www.databreachtoday.com/cryptomining-campaign-leverages-exchange-server-flaws-a-16462