stun/turn

The stun/turn tag on WindowsForum.com covers discussions about STUN and TURN protocols, particularly in the context of security vulnerabilities. A highlighted thread, "Ghost Calls: Stopping TURN-Based C2 Tunnels in Teams and Zoom," explains how attackers can misuse Microsoft Teams and Zoom's TURN infrastructure to tunnel command-and-control traffic, bypassing enterprise defenses by blending with legitimate WebRTC media flows. This technique exploits temporary TURN credentials from meeting participation, routing malicious traffic through trusted media relays. The content focuses on post-exploitation tactics, firewall evasion, and the challenges of detecting such abuse in unified communications platforms. The tag is relevant for IT security professionals concerned with network security, WebRTC, and collaboration tool risks.