BRONZE SANDCASTLE Hackers Steal Active Directory Database Using Hidden Windows Backdoors
BRONZE SANDCASTLE intrusions involving hidden Windows backdoors and the theft of the Active Directory database. The suspected China-based group combines legitimate applications, malicious DLLs, and encrypted payloads to execute code inside trusted …