BRONZE SANDCASTLE Hackers Steal Active Directory Database Using Hidden Windows Backdoors

BRONZE SANDCASTLE intrusions involving hidden Windows backdoors and the theft of the Active Directory database. The suspected China-based group combines legitimate applications, malicious DLLs, and encrypted payloads to execute code inside trusted processes while limiting artifacts available to conventional file scanning. Investigations covering August 2025 through August 2026 identified victims in the Philippines, Taiwan, Afghanistan, […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform