---
id: 6005
title: "Semperis Identity Attack Watch: January 2021"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/semperis-identity-attack-watch-january-2021/"
published_at: "2021-02-04T06:52:17Z"
tags: ["active-directory", "ransomware", "sap", "revil", "news-roundup", "ghost-attacks"]
phying_url: "https://phying.com/item/6005"
lang: en
---

# Semperis Identity Attack Watch: January 2021

## Summary

January 2021 roundup: an exploit for SAP's SolMan, the 'Active Directory of SAP'; Sophos-described ghost attacks where intruders added AD domain-admin accounts undetected; and REvil's Dairy Farm hit, using AD screenshots as extortion proof.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2021-02-04T06:52:17Z
- **Original:** https://www.semperis.com/blog/semperis-identity-attack-watch-january-2021/
- **Phying News:** https://phying.com/item/6005