Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Identity Attack Watch: AD Security News, May 2023

semperis.com | blog | #active-directory | #ransomware | #manufacturing | #alphv | #news-roundup | #lockbit | #black-basta

Summary

May 2023 roundup: Black Basta hit ABB's Active Directory and Rheinmetall, LockBit claimed MCNA Dental (nearly 9 million patients), and ALPHV/BlackCat compromised Constellation Software.
Published
Collected

original ↗

Related coverage

incident · semperis.com
Identity Attack Watch: November 2022
November 2022 roundup: Sandworm spread RansomBoggs via domain controllers in Ukraine; LockBit hit Southampton County and Continental; Vice Society struck Cincinnati College; Black Basta hit Sobeys.
incident · semperis.com
Identity Attack Watch: July 2022
July 2022 roundup: LockBit claimed 100GB stolen from Italy's tax agency and hit small towns; Black Basta shut down manufacturer Knauf; BlackCat breached game publisher Bandai Namco.
blog · semperis.com
Identity Attack Watch: December 2022
December 2022 roundup: LockBit hit the Port of Lisbon and California's Department of Finance; Hive hit Louisiana's Lake Charles Memorial (270,000 patients); BlackCat hit Colombian energy firm EPM.
blog · semperis.com
Identity Attack Watch: December 2021
December 2021 roundup: Microsoft urged immediate patching of two AD flaws enabling domain takeover; Conti weaponized Log4j against Kronos payroll; FBI warned on Cuba ransomware; ALPHV BlackCat emerged with domain-credential features.
blog · semperis.com
Identity Attack Watch: September 2021
September 2021 roundup: a CISA/FBI/NSA joint advisory warned of escalating Conti attacks (patch Zerologon); LockBit returned with a GPO-based AD deployment technique; BlackMatter hit Olympus and Iowa's New Cooperative.
blog · semperis.com
Identity Attack Watch: August 2021
August 2021 roundup: LockFile exploited ProxyShell and PetitPotam to reach AD; LockBit 2.0 attacks surged (including Accenture); FBI issued a Hive alert after Memorial Health; Nokia's SAC Wireless hit by Conti.
back