May 05, 2021 Intervention halts a ProxyLogon-enabled attack A late charge by a cavalry of reinforcements prevented the attackers from causing greater harm SophosLabs UncutThreat Research