The Lazarus Group has been detected using stolen credentials to move laterally within the network, targeting critical aerospace and military data. The threat actor is leveraging known TTPs to maintain access and seek sensitive information.