Skip to content
Threat Feed
Subscribe

Tag

Dcsync

3 briefs RSS
high threat

China-Linked Espionage Campaign Targeting Global Infrastructure via Integrity Technology Group

Integrity Technology Group, a Chinese for-profit entity, is conducting multi-year cyber espionage targeting government, healthcare, and religious institutions using automated vulnerability scanning, credential harvesting, and specialized data exfiltration tools.

Bash +12 Integrity Technology Group espionage china cyber-espionage microsoft-365 dcsync
3t 6c 2i
medium advisory

Potential Active Directory Replication Account Backdoor

Attackers can modify Active Directory object security descriptors to grant DCSync rights to unauthorized accounts, creating a backdoor to extract credential data.

Active Directory credential-access persistence active-directory dcsync
2r 2t
critical advisory

Windows AD Domain Replication ACL Addition Detection

This brief details the detection of unauthorized modifications to Active Directory domain replication Access Control Lists (ACLs), specifically targeting permissions that enable DCSync attacks, potentially leading to sensitive data exfiltration and privilege escalation.

Active Directory active-directory dcsync acl windows privilege-escalation persistence
2r 2t