SolarWinds Attackers Hit Active Directory Servers with FoggyWeb Backdoor
-
Microsoft is warning that the Nobelium APT is compromising single-sign-on servers to install a post-exploitation backdoor that steals data and maintains network persistence.
https://threatpost.com/solarwinds-active-directory-servers-foggyweb-backdoor/175056/