---
id: 5988
title: "Identity Attack Watch: May 2021"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/identity-attack-watch-may-2021/"
published_at: "2021-05-28T15:53:51Z"
tags: ["active-directory", "solarwinds", "news-roundup", "colonial-pipeline", "fortinet", "conti"]
phying_url: "https://phying.com/item/5988"
lang: en
---

# Identity Attack Watch: May 2021

## Summary

May 2021 roundup: SolarWinds actors escalated via Constant Contact (~150 orgs' email); APTs hit a U.S. local government via Fortinet flaws; Colonial Pipeline targeted Windows; Conti used domain credentials against Ireland's Health Service.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2021-05-28T15:53:51Z
- **Original:** https://www.semperis.com/blog/identity-attack-watch-may-2021/
- **Phying News:** https://phying.com/item/5988