Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

Unidentified threat actors have been observed targeting publicly exposed Microsoft Exchange servers to inject malicious code into login pages. Positive Technologies identified two different kinds of keylogger code written in JavaScript on the Outlook login page.