ProxyShell vs. ProxyLogon: What's the Difference? | Huntress

Huntress outlines the risks from two Microsoft Exchange vulnerabilities—ProxyShell (disclosed Aug 2021) and ProxyLogon (Mar 2021)—reporting active scanning and exploitation of unpatched on-prem Exchange servers that can yield remote code execution and administrative (“god mode”) access. The advisory notes hundreds of webshells observed, highlights potential impacts (lateral movement, data theft, ransomware), and strongly recommends immediate patching and monitoring for IOCs.