---
id: 5877
title: "Identity Attack Watch: AD Security News, September 2023"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/identity-attack-watch-ad-security-news-september-2023/"
published_at: "2023-09-29T15:50:17Z"
tags: ["active-directory", "ransomware", "entra-id", "moveit", "news-roundup", "johnson-controls", "apt33"]
phying_url: "https://phying.com/item/5877"
lang: en
---

# Identity Attack Watch: AD Security News, September 2023

## Summary

September 2023 roundup: Johnson Controls ransomware (Dark Angels ESXi encryptor), MOVEit victims in Canada and the US, Royal claiming Dallas, BlackCat hitting MGM, and APT33 spraying Entra ID.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2023-09-29T15:50:17Z
- **Original:** https://www.semperis.com/blog/identity-attack-watch-ad-security-news-september-2023/
- **Phying News:** https://phying.com/item/5877