Home

Exchange and the Turla LightNeuron Attack

%3CLINGO-SUB%20id%3D%22lingo-sub-552191%22%20slang%3D%22en-US%22%3EExchange%20and%20the%20Turla%20LightNeuron%20Attack%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-552191%22%20slang%3D%22en-US%22%3E%3CP%3ETurla%2C%20a%20Russian%20cyber-espionage%20group%20is%20reported%20as%20being%20behind%20an%20attack%20on%20Exchange%20on-premises%20servers%20that%20uses%20transport%20agents%20to%20capture%20and%20process%20messages%20for%20selected%20users.%20It's%20an%20attack%20vector%20that%20hasn't%20been%20seen%20before%20and%20raises%20the%20question%20of%20how%20often%20administrators%20should%20review%20transport%20agents%20active%20on%20their%20servers.%20The%20important%20point%20is%20that%20unless%20your%20network%20is%20compromised%2C%20hackers%20cannot%20install%20transport%20agents%20on%20Exchange%20servers%20and%20this%20attack%20is%20more%20theoretical%20than%20practical.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2Fexchange-turla-lightneuron-attack%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2Fexchange-turla-lightneuron-attack%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-552191%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Tony Redmond
MVP

Turla, a Russian cyber-espionage group is reported as being behind an attack on Exchange on-premises servers that uses transport agents to capture and process messages for selected users. It's an attack vector that hasn't been seen before and raises the question of how often administrators should review transport agents active on their servers. The important point is that unless your network is compromised, hackers cannot install transport agents on Exchange servers and this attack is more theoretical than practical.

https://www.petri.com/exchange-turla-lightneuron-attack

Related Conversations
eDiscovery - non 365 data - MSG files
jackvdbuk in Office 365 on
0 Replies
Office 365 Sending Limit Clarification
jab9417 in Office 365 on
1 Replies
Office 365 domain using external email server
SimonNZ in Office 365 on
1 Replies
Group and User Mix-up
Ruby_Monday in Office 365 on
3 Replies
Ports
Rising Flight in Office 365 on
0 Replies