Microsoft warns: Active Directory FoggyWeb malware being actively used by Nobelium gang

Chief security adviser Roger Halbheer says best protection is to 'get off AD FS'

Microsoft has warned of a new tool designed to exfiltrate credentials and introduce a backdoor into Active Directory servers that is under active use by the Nobelium threat actor group.…

from The Register