Ransomware group PAYLOAD weaponizes Microsoft Active Directory for disruption

The PAYLOAD ransomware group targeted a manufacturing organization in the Middle East, gaining initial access via a compromised VPN account, Kaspersky reported.