Forum Discussion
Users are automatically created in excahnge server 2019 and send sapmming emails to other domains
Dear Experts, We have recently migrated an on-premise exchange server from the exchange server 2013 to the On-premise exchange server 2019 and it has run for almost 20 days without any issues. S...
Hi,
It seems that your server/s have been compromised. 1st step will be server isolation and investigation/remediaton, ( I guess you already did it as per the post date ).
In this articles, ( even if they're talking about another vulnerabilities ), you'll find detailed information about how to investigate and remediate compromised Exchange servers:
https://msrc-blog.microsoft.com/2021/03/16/guidance-for-responders-investigating-and-remediating-on-premises-exchange-server-vulnerabilities/
https://www.stellarinfo.com/blog/recover-microsoft-exchange-server-after-hafnium-attack/
It seems that your server/s have been compromised. 1st step will be server isolation and investigation/remediaton, ( I guess you already did it as per the post date ).
In this articles, ( even if they're talking about another vulnerabilities ), you'll find detailed information about how to investigate and remediate compromised Exchange servers:
https://msrc-blog.microsoft.com/2021/03/16/guidance-for-responders-investigating-and-remediating-on-premises-exchange-server-vulnerabilities/
https://www.stellarinfo.com/blog/recover-microsoft-exchange-server-after-hafnium-attack/