Hacker News Reader

How they moved laterally was likely trivial. Every place that I seen with a VPN tends to trust everything within the VPN.

Check the network share for a folder called "Passwords"