[SecList]Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

[igor51]

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Objects.
Source: Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO