## Overview
Following the successful spear phishing campaign, the Elise backdoor was activated on the compromised systems.

## Details
- **Execution Method:** The macro from the phishing email executed a script to download and install the Elise backdoor.
- **Command and Control (C2):** Communication established with a remote C2 server for further instructions.

## Insights
The backdoor allows remote control of infected machines, enabling data collection and further exploitation.

## Recommendations
- Implement network monitoring to detect abnormal outbound connections.
- Disable macros by default and enforce strict execution policies.