Windows NTLM token exfiltration possible with forced authentication exploits

Windows NT LAN Manager tokens could be exposed in a new attack leveraging forced authentication through a custom Microsoft Access file, The Hacker News reports. Threat actors could conduct the intrusion by exploiting Access’ linked table feature by adding an .accdb file containing a remote SQL Server database link to a Microsoft Word document, a report from Check Point revealed.

Source: SC Magazine

 


Date:

Categorie(s):

Tag(s):