← Back to Feed

From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion

September 29, 2025 · DFIR Report · Severity: MEDIUM

Key Takeaways Private Threat Briefs: 20+ private DFIR reports annually.   Contact us today for pricing or a demo!   Table of Contents: Case Summary Analysts Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Command and Control Exfiltration Impact Timeline Diamond Model Indicators Detections MITRE ATT&CK   Case Summary The intrusion […] The post From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion appeared first on The DFIR Report.

Key Takeaways

  • Lunar Spider enabled a near two-month intrusion from a single click.
  • The case analysis covers the full intrusion lifecycle from initial access to command and control.
  • The DFIR Report provides detailed analysis of the Lunar Spider intrusion.
☕ Buy a Coffee