ToddyCat Malware Exploits ProxyLogon to Compromise Microsoft Exchange Servers

Gbhackers •Mayura Kathir • January 7, 2026

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ToddyCat Malware Targets Microsoft Exchange Servers via ProxyLogon Vulnerability ToddyCat, a cyber espionage group, has been targeting Microsoft Exchange servers since December 2020. The group initially exploited an unidentified vulnerability but significantly ramped up its operations in February 2021 by leveraging the ProxyLogon vulnerability to compromise servers in various high-profile organizations across multiple continents. 3 sources 32

Extracted Entities

ToddyCat Malware Exploits ProxyLogon to Compromise Microsoft Exchange Servers

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Vulnerabilities (1)