![\"\"](\"https:\/\/cdn.pixabay.com\/photo\/2020\/06\/12\/19\/02\/artificial-intelligence-5291510__340.jpg\")
<\/figure><\/div>\n\n\n\nAdversaries are deploying DearCry ransomware<\/strong> on victim systems after hacking into on-premise Microsoft Exchange <\/strong>servers that remain unpatched, Microsoft acknowledged late Thursday.<\/p>\n\n\n\n \u201cMicrosoft observed a new family of human operated ransomware attack customers,\u201d Microsoft Security Program Manager Phillip Misner tweeted at 9:19 p.m. ET Thursday. \u201cHuman operated ransomware attacks are utilizing the Microsoft Exchange<\/strong> vulnerabilities to exploit customers.\u201d<\/p>\n\n\n\n Misner\u2019s tweet came less than two hours after BleepingComputer reported that threat actors were taking advantage of new zero-day ProxyLogin vulnerabilities in Microsoft Exchange<\/strong> servers<\/a> to install the DearCry ransomware. Microsoft Defender customers who receive automatic updates are now protected against this ransomware<\/strong> without having to take any action, according to Microsoft Security Intelligence.<\/p>\n\n\n\n \u201cWe have detected and are now blocking a new family of ransomware <\/strong>being used after an initial compromise of unpatched on-premises Exchange<\/strong> Servers,\u201d Microsoft Security Intelligence tweeted to 11:53 p.m. ET Thursday. \u201cMicrosoft protects against this threat known as \u2026 DearCry.\u201d Read On:<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"