New Service Launched in Response to Hafnium Attacks

TrustedSec reports widespread exploitation of Microsoft Exchange servers by the Hafnium actor, with many servers compromised before patches were available and backdoors uploaded that could be used post-patch. They offer a Microsoft Exchange Incident Response Emergency Analysis service to extract forensic data, identify compromises, backdoors, and post-compromise activity, and deliver findings within one business day to help organizations contain and mitigate the threat.