DO810 ABB

Closer analysis has shown that attackers used the Mimikatz utility to steal the authentication data of Windows accounts stored on a compromised system.This information can be used by attackers to gain access to other systems within the enterprise network and develop attacks.This is particularly dangerous when attackers gain access to accounts that have domain administrator rights.

进一步的分析表明，攻击者使用Mimikatz实用程序窃取了存储在受感染系统上的Windows帐户的身份验证数据。攻击者可以利用这些信息来访问企业网络中的其他系统并发起攻击。当攻击者获得对具有域管理员权限帐户的访问权限时，这尤其危险。