← Back to Feed
From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion
September 29, 2025 · DFIR Report · Severity: MEDIUM
Key Takeaways Private Threat Briefs: 20+ private DFIR reports annually.   Contact us today for pricing or a demo!   Table of Contents: Case Summary Analysts Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Command and Control Exfiltration Impact Timeline Diamond Model Indicators Detections MITRE ATT&CK Case Summary The intrusion […] The post From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion appeared first on The DFIR Report.
Key Takeaways
- DFIR Report analyzed how Lunar Spider enabled a near two-month intrusion from a single click.
- The case study details the full attack chain from initial access through command and control.
- Defenders should treat a single user click as a potential full compromise and respond with complete network investigation.