GPO Manipulation

MITRE ATT&CK

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 16, 2025

Last Seen

December 16, 2025

API

GPO Manipulation refers to adversaries modifying Group Policy Objects within an Active Directory environment to deploy malicious configurations, startup scripts, or registry changes across domain-joined hosts.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (1)

Gentlemen Ransomware Targets Global Industries Amid LLM Integration

Dec 17·26 sources

Related Entities

Ransomware Construction Healthcare Insurance Manufacturing Go MongoDB Mssql Veeam Windows Defender Devman Gentlemen

GPO Manipulation

Overview

Recent Events

Profile

Exploited By

Affected Platforms

Sectors Affected

Relationships

Related Clusters (1)

Gentlemen Ransomware Targets Global Industries Amid LLM Integration

Related Articles (1)

ASEC warns of expanding Gentlemen ransomware campaigns hitting manufacturing and healthcare

Related Entities