Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation
By [email protected] (The Hacker News)
AI Summary
Bitdefender attributed a multi-wave intrusion against an unnamed Azerbaijani oil and gas company between late December 2025 and late February 2026 to FamousSparrow (aka UAT-9244), a China-linked APT group, via repeated exploitation of Microsoft Exchange. The campaign represents an expansion of FamousSparrow's targeting beyond its traditionally observed sectors of hospitality, telecom, and government into critical energy infrastructure in the South Caucasus. Exchange exploitation remains a primary initial access vector for Chinese APT groups, and energy sector defenders in the region should audit Exchange server exposure and patch status immediately.
Relevance score: 74.0/100
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →