Canadian and Saudi Arabian cybersecurity raised awareness about the ongoing attack targeting the outdated systems. The attackers used the China Chopper web shell to access the compromised servers remotely and issue commands and manage files on the victim server. The vulnerability affects all versions of SharePoint Server 2010 to 2019, and vulnerabilities can be tracked as CVE-2019-0604, it was patched by Microsoft in February, releasing security updates on March 12 and again April 25. The targeted industries are academic, utility, heavy industry, manufacturing and technology sectors.”]
Source: https://hackercombat.com/microsoft-sharepoint-servers-actively-targeted-by-hackers/