Fortra Intelligence and Research Experts (FIRE) just released research examining ExfilSquad, a new data extortion group believed to be exploiting misconfigured Microsoft Power Pages to access Dynamics 365 data. FIRE have obtained ExfilSquad data samples, and our analysis supports ExfilSquad’s claim that they have access to sensitive data from 15 different organizations.
This report is intended to help security teams understand the likely attack path, indicators of exposure, the types of data at risk, and immediate steps to identify and secure vulnerable Power Pages environments before sensitive CRM and ERP data is exposed.
Report can be accessed here: https://www.fortra.com/blog/exfilsquad-data-extortion-group-ransoming-microsoft-d365-data
Related
This entry was posted on August 13, 2026 at 3:42 pm and is filed under Commentary with tags Fortra. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
New FIRE Analysis of ExfilSquad’s D365 Data Extortion Campaign
Fortra Intelligence and Research Experts (FIRE) just released research examining ExfilSquad, a new data extortion group believed to be exploiting misconfigured Microsoft Power Pages to access Dynamics 365 data. FIRE have obtained ExfilSquad data samples, and our analysis supports ExfilSquad’s claim that they have access to sensitive data from 15 different organizations.
This report is intended to help security teams understand the likely attack path, indicators of exposure, the types of data at risk, and immediate steps to identify and secure vulnerable Power Pages environments before sensitive CRM and ERP data is exposed.
Report can be accessed here: https://www.fortra.com/blog/exfilsquad-data-extortion-group-ransoming-microsoft-d365-data
Share this:
Like this:
Related
This entry was posted on August 13, 2026 at 3:42 pm and is filed under Commentary with tags Fortra. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.