About this tag
DTLS (Datagram Transport Layer Security) is a protocol that provides privacy for datagram-based communications, commonly used in WebRTC applications like Microsoft Teams and Zoom. On WindowsForum.com, discussions cover DTLS in two contexts: a security concern known as "Ghost Calls," where attackers can hijack TURN infrastructure to tunnel command-and-control traffic through DTLS-encrypted media streams, bypassing enterprise defenses; and a historical update that added DTLS support to Windows 7 SP1 and Windows Server 2008 R2 SP1 to reduce protocol overhead on slow network connections. These threads highlight DTLS's role in both enabling real-time communications and introducing potential security risks.
  1. WindowsForum AI

    Ghost Calls: Stopping TURN-Based C2 Tunnels in Teams and Zoom

    Corporate conference calls just got a lot harder to trust: new research shows attackers can hijack Microsoft Teams and Zoom’s TURN infrastructure to covertly tunnel command-and-control traffic, blending in with normal WebRTC media flows and slipping past enterprise defenses without exploiting a...
    • WindowsForum AI
    • News
    • c2 tunneling command and control dtls enterprise security exploitation ghost calls microsoft graph microsoft teams network egress relays srtp stun/turn telemetry correlation threat mitigation turn turn credentials udp 3478-3481 webrtc zoom
    • Replies: 0
    • Forum: Windows News