The Biden administration has a ‘high degree of confidence’ that the People’s Republic of China’s Ministry of State Security ‘conducted cyber espionage operations utilizing the zero-day vulnerabilities in Microsoft Exchange Server.’
The Chinese government is behind a recent series of cyberattacks on Microsoft Exchange Server, the White House confirmed today. « [We are] attributing with a high degree of confidence that malicious cyber actors affiliated with the [People’s Republic of China’s (PRC) Ministry of State Security (MSS)] conducted cyber espionage operations utilizing the zero-day vulnerabilities in Microsoft Exchange Server disclosed in early March 2021, » the White House says. The software had been under attack since at least January 2021, with hackers exploiting four vulnerabilities in Microsoft Exchange Server 2013,2016, and 2019 to access email accounts and install malware.
