ToddyCat Malware Targets Microsoft Exchange Servers via ProxyLogon Vulnerability

ToddyCat Malware Targets Microsoft Exchange Servers via ProxyLogon Vulnerability

First seen 7 Jan 2026, 22:32 UTC •GbhackersCybersecuritynewsThe420.In •95% similarity •32.2

Article Content

Browse articles
ThreatCluster

ToddyCat, a cyber espionage group, has been targeting Microsoft Exchange servers since December 2020. The group initially exploited an unidentified vulnerability but significantly ramped up its operations in February 2021 by leveraging the ProxyLogon vulnerability to compromise servers in various high-profile organizations across multiple continents.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

ToddyCat Microsoft Exchange