PaperCut Zero-Days Used to Deploy AdaptixC2 and Compromise an Education Customer’s Domain
eSentire details an intrusion exploiting two PaperCut MF zero-days to deploy a web shell and AdaptixC2, move from an education customer’s print server to a domain controller, and extract Active Directory password hashes.