SK Infosec Releases Free Tool for 'AD Hacking Check'

[Asia Economy Reporter Buaeri] SK Infosec announced on the 5th that it will release a free inspection tool that can check whether the Windows system management tool AD has been hacked.

AD is a tool used to manage large-scale system accounts. Using AD enables efficient management such as system account settings and policy deployment, so it is used by many companies.

SK Infosec made the inspection tool available for free so that companies can independently verify whether their AD has been attacked.

Recently, AD has become a prime target for hackers. If the AD server is compromised, it is possible to penetrate systems within the company's internal network. Through this, hackers can expand attacks to all systems of the company. Last year, a hacker group called 'CHAD' attacked AD servers of several domestic companies, causing damage.

SK Infosec stated, "By using the inspection tool, it is possible to check traces related not only to attacks by the CHAD hacker group but also to various AD attacks that occurred last year."

The inspection tool and user manual can be downloaded from the SK Infosec website. Companies can use the inspection tool to check Windows servers or PCs in the AD server or AD environment. The inspection results can be used to determine whether an AD attack has occurred based on the user manual.

Kim Seongdong, head of the SK Infosec Incident Response Team, advised, "If traces of an AD attack are found, it is highly likely that the attack has spread to other systems. Companies where attack traces are found should conduct prompt and thorough investigations to block the spread of damage and prepare countermeasures to prevent the same damage from recurring."