Most likely conducted by the company VenusTech, which is known for having close relations to CN government bodies, it showed significant failures by using weak or default credentials system wide, outdated firm- and software and a lack of proper network separation, making lateral moves rather trivial. 2/4