---
id: 5903
title: "Identity Attack Watch: AD Security News, February 2023"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/identity-attack-watch-february-2023/"
published_at: "2023-02-28T15:51:03Z"
tags: ["active-directory", "ransomware", "news-roundup", "lockbit", "cryptomining", "exchange-server"]
phying_url: "https://phying.com/item/5903"
lang: en
---

# Identity Attack Watch: AD Security News, February 2023

## Summary

February 2023 roundup: LockBit's attacks on a Portuguese water utility and ION Group exploited AD Group Policy flaws; ProxyShellMiner used Exchange ProxyShell bugs to spread crypto-mining.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2023-02-28T15:51:03Z
- **Original:** https://www.semperis.com/blog/identity-attack-watch-february-2023/
- **Phying News:** https://phying.com/item/5903