### Overview
After persistence was established, attackers utilized stolen credentials to move laterally across the network.

### Credential Acquisition
- **Techniques Used:** The attackers leveraged the credential harvesting capabilities of the RAT to capture usernames and passwords.
- **Credential Dumping Tools:** Tools such as Mimikatz were observed in use for credential dumping.

### Lateral Movement
- **Target Systems:** The attackers primarily targeted systems with administrative privileges and access to sensitive data.

### Recommendations
- **Credential Hygiene:** Enforce strong password policies and encourage regular password updates.
- **Network Segmentation:** Limit access between network segments to reduce the impact of credential theft.