Brandon Wales, acting director of the Cybersecurity and Infrastructure Security Agency, said owners of the email servers that were compromised before Microsoft Corp. issued a patch nearly three weeks ago must take additional measures to remove the hackers from their networks.
Microsoft has previously warned that patching won’t evict a hacker who has already compromised a server.
“We remain committed to supporting our customers against these attacks, to innovating on our security approach, and to partnering closely with governments and the security industry to help keep our customers and communities secure,” a Microsoft spokesperson said on Monday.