Home

Exchange and the Turla LightNeuron Attack

%3CLINGO-SUB%20id%3D%22lingo-sub-552191%22%20slang%3D%22en-US%22%3EExchange%20and%20the%20Turla%20LightNeuron%20Attack%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-552191%22%20slang%3D%22en-US%22%3E%3CP%3ETurla%2C%20a%20Russian%20cyber-espionage%20group%20is%20reported%20as%20being%20behind%20an%20attack%20on%20Exchange%20on-premises%20servers%20that%20uses%20transport%20agents%20to%20capture%20and%20process%20messages%20for%20selected%20users.%20It's%20an%20attack%20vector%20that%20hasn't%20been%20seen%20before%20and%20raises%20the%20question%20of%20how%20often%20administrators%20should%20review%20transport%20agents%20active%20on%20their%20servers.%20The%20important%20point%20is%20that%20unless%20your%20network%20is%20compromised%2C%20hackers%20cannot%20install%20transport%20agents%20on%20Exchange%20servers%20and%20this%20attack%20is%20more%20theoretical%20than%20practical.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fexchange-turla-lightneuron-attack%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fexchange-turla-lightneuron-attack%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-552191%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Tony Redmond
MVP

Turla, a Russian cyber-espionage group is reported as being behind an attack on Exchange on-premises servers that uses transport agents to capture and process messages for selected users. It's an attack vector that hasn't been seen before and raises the question of how often administrators should review transport agents active on their servers. The important point is that unless your network is compromised, hackers cannot install transport agents on Exchange servers and this attack is more theoretical than practical.

https://www.petri.com/exchange-turla-lightneuron-attack

Related Conversations
Outlook (365) Need Password - Issue
Muhammad Ali Khan in Office 365 on
20 Replies
Accessing a shared mailbox from a mobile device
Hexsysadmins in Office 365 on
14 Replies
O365 mailbox is not provisioning
Andy_Bond in Office 365 on
5 Replies