Often attacks like this involve first getting on the VPN (leaked creds, a n-day on a web-accessible endpoint, etc) then running wild on the internal services that everyone assumes are safe.

▲

PunchyHamster 3 hours ago | parent [-]

"I won't lock the door coz attackers might be able to bring battering ram"

	▲	bijowo1676 2 hours ago \| parent [-]
		you can just walk into any store, find ANY PC and stick your USB drive into it. or find any exposed Ethernet slot and slide your device in it. most of the time it will work and you will get an inside access. publicly available retail stores require multiple layers of defense across the L7 stack