TypeCampaignActors🐻APT29Pub. dateAugust 22, 2022Initial accessImpactObserved techniquesAdd attacker-controlled IdP via ADFS accessDisable loggingMFA enrollmentAuth token signing via Golden SAMLAuth token signing via ADFS accessReferenceshttps://www.mandiant.com/resources/blog/apt29-continues-targeting-microsoftStatusStubLast editedJun 2, 2024 8:02 AM