Ransomware

Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO

September 21, 2026 1 min read 3 views
cybersecurity news newsapi
Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Objects.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.