Hackers Pose as Domain Controllers to Steal Active Directory Password Hashes

Threat actors are increasingly abusing Active Directory replication to impersonate domain controllers and steal password hashes from enterprise networks. This technique, known as a DCSync attack, can let attackers obtain credential data for privileged accounts without deploying malware directly on a legitimate domain controller. Active Directory domain controllers manage authentication across Windows enterprise environments. They […]

This article has been indexed from Cyber Security News

Read the original article: