---
id: 5976
title: "Identity Attack Watch: September 2021"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/identity-attack-watch-september-2021/"
published_at: "2021-09-24T20:04:16Z"
tags: ["active-directory", "news-roundup", "lockbit", "zerologon", "conti", "blackmatter"]
phying_url: "https://phying.com/item/5976"
lang: en
---

# Identity Attack Watch: September 2021

## Summary

September 2021 roundup: a CISA/FBI/NSA joint advisory warned of escalating Conti attacks (patch Zerologon); LockBit returned with a GPO-based AD deployment technique; BlackMatter hit Olympus and Iowa's New Cooperative.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2021-09-24T20:04:16Z
- **Original:** https://www.semperis.com/blog/identity-attack-watch-september-2021/
- **Phying News:** https://phying.com/item/5976