Apr 15 2021 Attackers Target ProxyLogon Exploit to Install Cryptojacker

Source

Threat actors targeted compromised Exchange servers to host malicious Monero cryptominer in an “unusual attack,” Sophos researchers discovered. [...]