{"author_name":"tanigawa","published":"2026-07-30 00:00:00","author_url":"https://blog.hatena.ne.jp/tanigawa/","width":"100%","title":"Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation","provider_url":"https://hatena.blog","height":"190","provider_name":"Hatena Blog","image_url":null,"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fmalware-log.hatenablog.com%2Fentry%2F2026%2F07%2F30%2F000000_7\" title=\"Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation - TT Malware Log\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","version":"1.0","description":"\u3010\u8981\u70b9\u3011 \u25ce\u30ed\u30b7\u30a2\u7cfbTA488\u306fMicrosoft OWA\u306eXSS\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u8a8d\u8a3c\u60c5\u5831\u5909\u66f4\u3084\u7aef\u672b\u518d\u69cb\u7bc9\u5f8c\u3082\u7dad\u6301\u53ef\u80fd\u306a\u6c38\u7d9a\u7684\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9\u4fb5\u5bb3\u624b\u6cd5\u300cOWAReaper\u300d\u3092\u5c55\u958b\u3057\u305f (The Hacker News)","blog_title":"TT Malware Log","type":"rich","blog_url":"https://malware-log.hatenablog.com/","categories":["\u653b\u6483\u7d44\u7e54: Laundry Bear / Void Blizzard / TA488 (\u30ed\u30b7\u30a2)","\u30b5\u30fc\u30d3\u30b9: Microsoft OWA / Microsoft Outlook Web Access","\u653b\u6483\u624b\u6cd5: XSS / \u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0","CVE-2026-42897","Malware: OWAReaper"],"url":"https://malware-log.hatenablog.com/entry/2026/07/30/000000_7"}