Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Identity Attack Watch: April 2021

semperis.com | incident | #supply-chain | #active-directory | #ransomware | #education | #news-roundup | #passwordstate

Summary

April 2021 roundup: ransomware hit UK charity Harris Federation and Florida's Broward County schools; Cring abused VPN flaws and stolen credentials; a supply-chain attack on Click Studios' Passwordstate exposed ~29,000 customers.
Published
Collected

original ↗

Related coverage

incident · semperis.com
How Can K-12 Schools Defend Against Ransomware?
Explains why ransomware gangs target K-12 schools—data troves, downtime pressure, limited resources—and how districts can use free AD assessment tools and resilience planning to close identity gaps.
incident · semperis.com
Identity Attack Watch: AD Security News, January 2023
January 2023 roundup: Sandworm deployed SwiftSlicer wipers via AD Group Policy in Ukraine; Vice Society hit a German university and Fire Rescue Victoria; LockBit struck Royal Mail and Wabtec.
incident · semperis.com
Identity Attack Watch: November 2022
November 2022 roundup: Sandworm spread RansomBoggs via domain controllers in Ukraine; LockBit hit Southampton County and Continental; Vice Society struck Cincinnati College; Black Basta hit Sobeys.
incident · semperis.com
Identity Attack Watch: October 2022
October 2022 roundup: Microsoft warned of Prestige ransomware hitting Ukraine/Poland logistics via domain admin credentials; Hive attacked Tata Power; LockBit breached UK dealer Pendragon.
incident · semperis.com
Identity Attack Watch: September 2022
September 2022 roundup: the Bloody Ransomware Gang used a leaked LockBit builder; an SEO poisoning campaign led to AD compromise; Lapsus$ breached Uber; Hive struck New York and Canadian targets.
incident · semperis.com
Identity Attack Watch: July 2022
July 2022 roundup: LockBit claimed 100GB stolen from Italy's tax agency and hit small towns; Black Basta shut down manufacturer Knauf; BlackCat breached game publisher Bandai Namco.
back