---
id: 5845
title: "Identity Attack Watch: AD Security News, April 2024"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/identity-attack-watch-ad-security-news-april-2024/"
published_at: "2024-05-01T16:44:51Z"
tags: ["active-directory", "credential-theft", "okta", "news-roundup", "cuttlefish", "change-healthcare"]
phying_url: "https://phying.com/item/5845"
lang: en
---

# Identity Attack Watch: AD Security News, April 2024

## Summary

April 2024 roundup: Cuttlefish malware infected routers to steal credentials, Change Healthcare's breach traced to a Citrix service without MFA, and Okta warned of surging spray attacks.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2024-05-01T16:44:51Z
- **Original:** https://www.semperis.com/blog/identity-attack-watch-ad-security-news-april-2024/
- **Phying News:** https://phying.com/item/5845