---
id: 5925
title: "Identity Attack Watch: September 2022"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/identity-attack-watch-september-2022/"
published_at: "2022-09-30T19:12:40Z"
tags: ["active-directory", "ransomware", "news-roundup", "hive", "lapsus", "seo-poisoning"]
phying_url: "https://phying.com/item/5925"
lang: en
---

# Identity Attack Watch: September 2022

## Summary

September 2022 roundup: the Bloody Ransomware Gang used a leaked LockBit builder; an SEO poisoning campaign led to AD compromise; Lapsus$ breached Uber; Hive struck New York and Canadian targets.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2022-09-30T19:12:40Z
- **Original:** https://www.semperis.com/blog/identity-attack-watch-september-2022/
- **Phying News:** https://phying.com/item/5925