Alerts Events DCR

Go to listing page

Efficient 'MagicWeb' Malware Subverts AD FS Authentication, Microsoft Warns

Threat Actors
August 25, 2022
Dark Reading

The attackers behind the SolarWinds supply chain attack have added a new arrow to their quiver of misery: A post-compromise capability dubbed MagicWeb, which is used to maintain persistent access to compromised environments and move laterally.

NOBELIUM APT
Russian Hacker Group
MagicWeb Malware
compromised environment
Lateral Movement

Publisher