Unidentified threat agents have been detected directing their efforts at publicly accessible Microsoft Exchange servers to implant harmful code into the login interfaces that capture user credentials. Positive Technologies, in a recent analysis released last week, reported the discovery of two distinct types of keylogger scripts crafted in JavaScript on the Outlook login page –

Those that store the gathered information in a local file.