[rwth-security] Hackers steal Microsoft Exchange credentials using IIS module