Attackers are abusing poorly secured and managed implementations of Microsoft Active Directory. Active Directory, built into most Windows Server operating systems, has become the dominant approach to managing Windows domain networks. The cybercrime gang known as Carbanak, meanwhile, has been wielding malware known as Cobalt Strike Beacon, says security firm Bitdefender. By and large, firms have at least one vulnerability a security firm survey shows. Rapid7: 96 percent of firms surveyed saw some vulnerabilities reported by security firm Rapid7.”]
Source: https://www.databreachtoday.com/hackers-abuse-active-directory-a-12825