While Squirrelwaffle leveraged Exchange to spread malspam through hijacked email threads, one thread was spirited away by attackers to trick the target into a money transfer
Article Link: Vulnerable Exchange server hit by Squirrelwaffle and financial fraud – Sophos News