[Op Report] From SSA Phish to AdaptixC2: A Multi-RAT Intrusion

A disciplined attacker leveraged a convincing SSA-themed phishing lure to deliver a multi-layered intrusion chain—combining AdaptixC2, XWorm, and dual ScreenConnect implants for redundant control and exfiltration—demonstrating how commodity tools, clever social engineering, and resilient C2 infrastructure can thoroughly compromise an enterprise environment without novel exploits.