Mandiant Releases Rainbow Tables Enabling NTLMv1 Admin Password Hacking

Mandiant (Google) published a comprehensive Net-NTLMv1 rainbow table dataset that makes recovering Net-NTLMv1-derived credentials feasible on consumer-grade hardware within hours, turning a decades-old cryptographic weakness into a practical high-impact attack vector; the report details the attack chain (coercion tools, preprocessing, cracking tools), detection (Event ID 4624 filtering for "LM"/"NTLMv1") and mitigation (disable Net-NTLMv1 / enforce NTLMv2), and warns organizations to prioritize remediation.