---
id: 9525
title: "Untrustworthy Trust Builders: Account Operators Replicating Trust Attack (AORTA)"
source_domain: specterops.io
source_url: "https://specterops.io/blog/2025/06/25/untrustworthy-trust-builders-account-operators-replicating-trust-attack-aorta/"
published_at: "2025-06-25T09:30:00Z"
phying_url: "https://phying.com/item/9525"
lang: en
---

# Untrustworthy Trust Builders: Account Operators Replicating Trust Attack (AORTA)

## Summary

Account Operators can compromise an Active Directory domain by using Incoming Forest Trust Builders and DnsAdmins to create a trust with TGT delegation enabled.

## Intelligence Metadata

- **Sources:** specterops.io
- **Published:** 2025-06-25T09:30:00Z
- **Original:** https://specterops.io/blog/2025/06/25/untrustworthy-trust-builders-account-operators-replicating-trust-attack-aorta/
- **Phying News:** https://phying.com/item/9525