Hackers Abuse Active Directory SPN Misconfigurations for Stealthy Kerberoasting Attacks

Threat actors are increasingly abusing overlooked Active Directory service principal name (SPN) misconfigurations to launch stealthier Kerberoasting attacks, turning ordinary user accounts into high-value credential targets. The technique, dubbed “Ghost SPN” by Trellix researchers, can allow an intruder with delegated directory permissions to temporarily assign an SPN to a standard account, request a Kerberos service […] The post Hackers Abuse Active Directory SPN Misconfigurations for Stealthy Kerberoasting Attacks appeared first on Cyber Security News.