Remediation will not be simple — it will effectively require backing up data, re-imaging the Exchange server, scrubbing the backup of any accounts which should not be present, resetting all passwords and secrets and restoring the remaining backup data.
Every time one occurs, the news highlights the risks and fallout. With recent attacks infiltrating the supply chain and ransomware now infecting hypervisors without any end user interaction, businesses must step up their security to thwart modern attacks but at a risk of becoming numb and complacent to the constant onslaught of exploits.