CYBERSECURITYTRACKER
TRACKING
Permanent story citation

Five Years, 88,000 Backdoors, and a Pair of Handcuffs: Inside the Global Manhunt That Ended in an Arrest

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4641

As cited

Copy frozen at (site build).

breaches incidents

Five Years, 88,000 Backdoors, and a Pair of Handcuffs: Inside the Global Manhunt That Ended in an Arrest

Huntress and the FBI conducted a five-year investigation into Silk Typhoon, a threat actor responsible for installing approximately 88,000 backdoors on Microsoft Exchange servers. The investigation culminated in an arrest and broader law enforcement action against the cybercrime operation.

Why it matters: Organizations using Exchange servers need to understand the scope of historical compromises from this actor and review their systems for persistence mechanisms; practitioners should monitor for any indicators of compromise related to this investigation.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary