Skeleton Key malware steals credentials to infiltrate networks

From Information Society:

Skeleton Key malware steals credentials to infiltrate networks

"“Skeleton Key is deployed as an in-memory patch on a victim’s Active Directory [AD] domain controllers to allow the threat actor to authenticate as any user, while legitimate users can continue to authenticate as normal,” read the advisory."