Microsoft Warns of 'FoggyWeb' Malware Targeting AD FS Servers

The group tracked as Nobelium uses multiple tactics to steal credentials with the goal of gaining admin access to Active Directory Federation Services.