[Op Report] From Award Scam to Domain Recon & Exfiltration

A sophisticated, financially motivated attack chain leveraged a phishing lure, living-off-the-land techniques, and three distinct C2 frameworks to exfiltrate browser credentials and conduct domain reconnaissance, adapting payloads based on Active Directory presence and demonstrating advanced access-broker tradecraft.