Microsoft Exchange servers targeted with Cuba ransomware
Microsoft Exchange servers targeted with Cuba ransomware The Cuba group is looking to distribute the COLDDRAW ransomware When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works. The UNC2596 ransomware group, also known as Cuba, is abusing vulnerabilities found inMicrosoftExchange to compromise corporateendpoints, harvest data, and ultimately, deploy the COLDDRAWmalware. Cybersecurity experts from Mandiant caught on theransomwaregroup’s trail, saying it mostly hunts down companies in the United States and Canada....