Across universities, corporations, and international agencies, a quiet campaign has been unfolding — one that does not break through defenses so much as walk through them. Researchers at Infoblox Threat Intel have traced an adversary-in-the-middle operation that turns the ordinary rhythms of organizational life — procurement requests, file sharing, routine correspondence — into the mechanism of compromise itself. By positioning themselves invisibly between users and their login pages, attackers let authentication succeed and then take what follows: the session, the access, the trust that was n