The attacks on Microsoft Exchange Server around the world by Hafnium have affected tens of thousands of organizations. In this session, Semperis Director of Services Sean Deuby talks with Alan Sugano, president of ADS Consulting Group, who has been on the front lines helping clients patch and recover from the attack. Alan provides practical, step-by-step instructions for using the Microsoft Safety Scanner to look for Indicators of Compromise (IOCs) and patch systems. Key takeaway: Traditional anti-virus programs will NOT uncover this malware.

Resources:

Safety Scanner for Microsoft

Purple Knight

TRUSEC Blog

Huntress Blog