Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
September 21, 2026
1 min read
3 views
cybersecurity
news
newsapi
Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Objects.
Was this article helpful?
0 found this helpful