---
id: 5957
title: "Identity Attack Watch: March 2022"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/identity-attack-watch-march-2022/"
published_at: "2022-03-31T15:26:57Z"
tags: ["cloud", "active-directory", "cisa", "ransomware", "news-roundup", "lapsus", "hermeticwiper"]
phying_url: "https://phying.com/item/5957"
lang: en
---

# Identity Attack Watch: March 2022

## Summary

March 2022 roundup: HermeticWiper deployed via default domain policy against Ukrainian orgs; Lapsus$ social-engineered Azure AD/Okta access; AvosLocker hit critical infrastructure; CISA renewed PrintNightmare and MFA warnings.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2022-03-31T15:26:57Z
- **Original:** https://www.semperis.com/blog/identity-attack-watch-march-2022/
- **Phying News:** https://phying.com/item/5957