A Sharepoint Server Vulnerability Is Being Exploited For Academic And Manufacturing Attacks
As such, those with updated servers should have nothing to fear, but the Canadian Center for Cyber Security (CCCS) and Saudi National Cyber Security Center (SNSC) both reported attacks. Attacks began shortly after demo exploit code was published in March. According to the agencies, attackers took over SharePoint servers with a version of the China Chopper web shell malware. This was utilized for remote code execution on affected servers, Saudi officials citing the use of PowerShell scripts to gain further access....