TechRadar
Microsoft Exchange backdoors abused to spy on NGOs worldwide – The threat actor behind the campaign is called GELSEMIUM, a group known for attacking governments Cybersecurity researchers from Kaspersky recently discovered a brand new IIS module, designed to steal credentials that victims type in when logging into their Outlook Web Access (OWA) accounts. They dubbed the new module backdoor SessionManager, …