encrypted per platform guidelines · password available to recruiters on request
ClickFix lure delivered via SEO scraper leads to multi-stage PowerShell shellcode execution, COM hijack persistence, AD enumeration via SharpHound, lateral movement to a MagicInfo Premium server via CVE-2024-7399, and domain compromise via psexec with stolen service account credentials.
// incorrect password
scroll = zoom · drag = pan · double-click = toggle · esc = close