Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Identity Attack Watch: AD Security News, February 2023

semperis.com | incident | #active-directory | #ransomware | #news-roundup | #lockbit | #cryptomining | #exchange-server

Summary

February 2023 roundup: LockBit's attacks on a Portuguese water utility and ION Group exploited AD Group Policy flaws; ProxyShellMiner used Exchange ProxyShell bugs to spread crypto-mining.
Published
Collected

original ↗

Related coverage

incident · semperis.com
Identity Attack Watch: November 2022
November 2022 roundup: Sandworm spread RansomBoggs via domain controllers in Ukraine; LockBit hit Southampton County and Continental; Vice Society struck Cincinnati College; Black Basta hit Sobeys.
incident · semperis.com
Identity Attack Watch: October 2022
October 2022 roundup: Microsoft warned of Prestige ransomware hitting Ukraine/Poland logistics via domain admin credentials; Hive attacked Tata Power; LockBit breached UK dealer Pendragon.
incident · semperis.com
Identity Attack Watch: July 2022
July 2022 roundup: LockBit claimed 100GB stolen from Italy's tax agency and hit small towns; Black Basta shut down manufacturer Knauf; BlackCat breached game publisher Bandai Namco.
incident · semperis.com
Identity Attack Watch: January 2022
January 2022 roundup: phishing enrolled attacker devices into Azure AD tenants lacking enforced MFA; LockBit hit the French Ministry of Justice and European firms via GPO-based deployment; noPac can compromise DCs in seconds.
blog · semperis.com
Identity Attack Watch: December 2022
December 2022 roundup: LockBit hit the Port of Lisbon and California's Department of Finance; Hive hit Louisiana's Lake Charles Memorial (270,000 patients); BlackCat hit Colombian energy firm EPM.
blog · semperis.com
Identity Attack Watch: June 2022
June 2022 roundup: Conti breached 40+ organizations in one month; CISA urged Exchange Online users onto Modern Auth; BlackCat targets Exchange servers for AD recon; Vice Society hit Palermo; Black Basta paired with QBot.
back