TA577 Attacking Hundreds of Organizations to Steal NTLM Authentication Data

A cybercriminal threat actor known as TA577 has been identified as employing a new attack strategy to steal NT LAN Manager (NTLM) authentication information. This sophisticated activity is designed to gather sensitive information and facilitate subsequent malicious actions. Technical Analysis Proofpoint uncovered two distinct campaigns orchestrated by TA577 on February 26 and 27, 2024. These […]

The post TA577 Attacking Hundreds of Organizations to Steal NTLM Authentication Data appeared first on Cyber Security News.

actions actor analysis attack authentication campaigns cyber-attack cybercriminal data data breach data theft february information lan malicious manager ntlm ntlm authentication organizations proofpoint sensitive sensitive information steal strategy technical technical analysis threat threat actor uncovered