Hackers shoveled snow for company, were rewarded with network admin access
Summary
This article recounts a professional red-team exercise where attackers gained physical access to a building, deployed a Raspberry Pi to infiltrate the network, and used credential spraying to escalate to domain admin. It highlights failures in physical security, access controls, and password hygiene, with actionable lessons for strengthening authentication, network segmentation, and monitoring.