Russian hackers exploiting Outlook bug to hijack Exchange accounts

Microsoft's Threat Intelligence team issued a warning earlier today about the Russian state-sponsored actor APT28 (aka "Fancybear" or "Strontium") actively exploiting the CVE-2023-23397 Outlook flaw to hijack Microsoft Exchange accounts and steal sensitive information. [...]

accounts actor apt28 bug cve cve-2023-23397 exchange exploiting fancybear flaw hackers hijack information intelligence microsoft microsoft exchange outlook russian russian hackers security sensitive sensitive information sponsored state steal strontium team threat threat intelligence today warning