Skeleton Key exposes password flaws
 

SecureWorks, the security arm of Dell, has found malware which it has dubbed “Skeleton Key” which shows up weaknesses in the password system.

The attack consists of installing rogue software within Active Directory, and the malware then allows attackers to login as any user on the domain without the need for further authentication.

http://channeleye.co.uk/skeleton-key...assword-flaws/