Operation Paper Trail

TRACE · LINUX · difficulty 2 · ~22 min · 10 steps

You know what happened. Now preserve it, report it, and hand it over properly.

Briefing

The assessment from Cold Trail is written. An incident nobody reports is an incident that happens again — to you, and to everyone else the same operator touches next. This operation is the unglamorous half of the job: package the evidence so it holds up, prove it has not changed, find the right abuse contact, send a report a human will act on, publish the indicators so your peers benefit, and know the point at which this stops being yours to investigate.

Objectives

Return to the range lobby

THREAT FEED ▲ lateral movement via wmiexec up 18% ▲ new loader family 'GHOSTPULSE' staging via DLL search-order hijack ▲ prompt injection in support queues now routine ▲ cron persistence campaign targeting exposed SSH ▲ poisoned model weights on public hubs ▲ remember: trust nothing, hash everything ▲
operator@dojo:~$