A cyber-espionage campaign centred on vulnerable versions of Microsoft’s server software now involves the deployment of ransomware, Microsoft said in a late Wednesday blog post.
In the post, citing “expanded analysis and threat intelligence,” Microsoft said a group it dubs “Storm-2603” is using the vulnerability to seed the ransomware, which typically works by paralyzing victims’ networks until a digital currency payment is made.
The disclosure marks a potential escalation in the campaign, which has already hit at least 400 victims, according to…
