ThreatCluster

xHunt APT Targets Microsoft Exchange and IIS with Custom Backdoors

First seen 15 Dec 2025, 20:51 UTC •GbhackersCybersecuritynews •92% similarity •45

Article Content

Browse articles
ThreatCluster

The xHunt APT group is conducting targeted cyber-espionage campaigns against organizations in Kuwait, specifically focusing on the government, shipping, and transportation sectors. They exploit vulnerabilities in Microsoft Exchange and IIS web servers to deploy custom backdoors, utilizing a sophisticated and evolving toolkit since their emergence in 2018.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

XHunt IIS Microsoft Exchange Government Transportation