New Qilin Ransomware Attack Uses DCSync Technique to Abuse AD Replication Protocol

A recent Qilin ransomware intrusion has revealed a stealthy privilege escalation technique that abuses Active Directory’s built-in replication protocols to harvest domain credentials, including the coveted KRBTGT hash and NTLM password hashes for every account in the domain. Security researcher…

Read more →

The post New Qilin Ransomware Attack Uses DCSync Technique to Abuse AD Replication Protocol appeared first on IT Security News.