(credit: Aurich Lawson / Ars Technica) Microsoft Exchange servers compromised in a first round of attacks are getting infected for a second time by a ransomware gang that is trying to profit from a rash of exploits that caught organizations around the world flat-footed. The ransomware—known as Black Kingdom, DEMON, and DemonWare—is demanding $10,000 for […]
Tag: proxylogon
Ransomware gangs hijack 7,000 Exchange servers first hit by Chinese hackers
Enlarge (credit: Getty Images) Now organizations using Microsoft Exchange have a new security headache: never-before seen ransomware that’s being installed on thousands of servers that were already infected by state-sponsored hackers in China. Microsoft reported the new family of ransomware deployment late Thursday, saying that it was being deployed after the initial compromise of servers. […]