### Overview
Carbanak/FIN7 have initiated lateral movement across the network, leveraging harvested credentials to escalate privileges and access sensitive systems.

### Techniques Observed
- **Credential Reuse:** Exploiting weak password policies
- **Pass-the-Hash:** Utilizing NTLM hashes to authenticate
- **Exploitation of Vulnerable Services:** Targeting unpatched systems for entry

### Next Steps
The final stage involves manipulation of ATM withdrawal limits and exploitation of SWIFT gateways. Enhance monitoring of financial transaction systems and initiate real-time alerts for unusual transaction patterns.