Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le septembre 21, 2026, 13:03:48

Titre: [SecList]Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
Posté par: igor51 le septembre 21, 2026, 13:03:48

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Objects.
Source: Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO (https://securelist.com/tr/payload-ransomware-via-group-policy/121335/)