### Overview
Post-phishing, Lapsus$ deployed malware to harvest credentials from infected systems.

### Malware Characteristics
The malware, identified as a variant of RedLine Stealer, was designed to extract passwords, session tokens, and sensitive files from compromised devices.

### Indicators of Compromise
- **Unusual Network Traffic**: Outbound connections to C2 servers.
- **Altered System Files**: Presence of unauthorized executables.

### Next Steps
Focus on identifying persistence mechanisms that the threat actors might employ to maintain access to the network.