Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Identity Attack Watch: September 2022

semperis.com | incident | #active-directory | #ransomware | #news-roundup | #hive | #lapsus | #seo-poisoning

Summary

September 2022 roundup: the Bloody Ransomware Gang used a leaked LockBit builder; an SEO poisoning campaign led to AD compromise; Lapsus$ breached Uber; Hive struck New York and Canadian targets.
Published
Collected

original ↗

Related coverage

incident · semperis.com
Identity Attack Watch: October 2022
October 2022 roundup: Microsoft warned of Prestige ransomware hitting Ukraine/Poland logistics via domain admin credentials; Hive attacked Tata Power; LockBit breached UK dealer Pendragon.
blog · semperis.com
Identity Attack Watch: December 2022
December 2022 roundup: LockBit hit the Port of Lisbon and California's Department of Finance; Hive hit Louisiana's Lake Charles Memorial (270,000 patients); BlackCat hit Colombian energy firm EPM.
blog · semperis.com
Identity Attack Watch: April 2022
April 2022 roundup: FBI warning on BlackCat/ALPHV (dozens of victims); leaked Conti tools used against Russian firms; Hive breach exposed 850,000 Partnership HealthPlan members' data; Conti claimed the Panasonic Canada attack.
blog · semperis.com
Identity Attack Watch: March 2022
March 2022 roundup: HermeticWiper deployed via default domain policy against Ukrainian orgs; Lapsus$ social-engineered Azure AD/Okta access; AvosLocker hit critical infrastructure; CISA renewed PrintNightmare and MFA warnings.
blog · semperis.com
Identity Attack Watch: August 2021
August 2021 roundup: LockFile exploited ProxyShell and PetitPotam to reach AD; LockBit 2.0 attacks surged (including Accenture); FBI issued a Hive alert after Memorial Health; Nokia's SAC Wireless hit by Conti.
incident · semperis.com
Identity Attack Watch: AD Security News, January 2023
January 2023 roundup: Sandworm deployed SwiftSlicer wipers via AD Group Policy in Ukraine; Vice Society hit a German university and Fire Rescue Victoria; LockBit struck Royal Mail and Wabtec.
back