SolarWinds Attackers Hit Active Directory Servers with FoggyWeb Backdoor

[Cerberus]

Microsoft is warning that the Nobelium APT is compromising single-sign-on servers to install a post-exploitation backdoor that steals data and maintains network persistence.

https://threatpost.com/solarwinds-active-directory-servers-foggyweb-backdoor/175056/