Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation

A threat actor linked to China targeted an Azerbaijani oil and gas company between late December 2025 and late February 2026, marking an expansion of its targeting. The activity was attributed to a hacking group known as FamousSparrow. The intrusion involved repeated Microsoft Exchange exploitation.