xHunt APT Hackers Attacking Microsoft Exchange and IIS Web Servers to Deploy Custom Backdoors

Cybersecuritynews •Tushar Subhra Dutta • December 15, 2025

The xHunt advanced persistent threat group has firmly established itself as a sophisticated cyber-espionage actor, orchestrating targeted campaigns against organizations in Kuwait. Since its emergence in 2018, the group has focused intently on the government, shipping, and transportation sectors. Their operations are characterized by the use of a custom and evolving toolkit, with many tools […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

xHunt APT Targets Microsoft Exchange and IIS with Custom Backdoors The xHunt APT group is conducting targeted cyber-espionage campaigns against organizations in Kuwait, specifically focusing on the government, shipping, and transportation sectors. They exploit vulnerabilities in Microsoft Exchange and IIS web servers to deploy custom backdoors, utilizing a sophisticated and evolving toolkit since their emergence in 2018. 2 sources 45

Extracted Entities

xHunt APT Hackers Attacking Microsoft Exchange and IIS Web Servers to Deploy Custom Backdoors

The full story

Extracted Entities

APT Groups (1)

Countries (1)

Industries (2)

Platforms (2)