Microsoft Exchange have been under heavy attack for the past year starting with suspicious activity on a number of servers caused by a group called Hafnium. This fairly technical talk goes over the discovery and dissection of a malicious voicemail, that when processed gave the attackers full control over the mailserver.