The researchers analyzed roughly 250,000 internet-connected Microsoft Exchange servers and found exactly 85,261 to be exposed to these RCE flaws, with most located in Germany, followed by the US, the UK, France, and Russia. The report stressed that similar vulnerabilities were exposed in the past by Russian state-sponsored actors, not unlike the ones used by the GRU in 2020 to engage in large-scale attacks against government agencies, businesses, and organizations.
