A Precedent to Remember: FBI Operation Removed Web Shells from Exchange Servers (Part 1)

Matt B
7 min readApr 15, 2021

This post is Part 1 of a two-part series examining the April 2021 FBI operation to remove malicious web shells from hundreds of systems per a court order.

Figure 0. Notes on notes

On April 13, 2021, we learned what I believe will be a monumental event for cybersecurity in the United States. The U.S. Department of Justice announced a…

--

--