Ryuk Ransomware Group using Zerologon Vulnerability

The attackers started as a low-level user and exploited the Zerologon vulnerability (CVE-2020-1472) to gain access to the primary domain controller, with the entire attack lasting about 5 hours.