In early 2021, the world faced a massive cyber onslaught as Hafnium, a sophisticated APT group, exploited a series of zero-day vulnerabilities in Microsoft Exchange servers. With over 250,000 instances affected globally, organizations scrambled to patch their systems before the access was weaponized by ransomware operators. Trainees will dive into the intricate attack chain, from initial access to potential data exfiltration, and develop skills to counter such threats.