Skip to content
Threat Feed
Subscribe

Tag

Cve-2021-26858

1 brief RSS
medium threat

Suspicious File Creation by Microsoft Exchange Unified Messaging Service

This rule detects suspicious file creations by the Microsoft Exchange Server Unified Messaging service, potentially indicative of exploitation of CVE-2021-26858, leading to web shell deployment for initial access, lateral movement, and persistence.

exploited Microsoft Exchange Server exchange webshell cve-2021-26858 initial-access
2r 3t 1c