Comment by sobellian

If the payload is a credential stealer then they can use that to escalate into basically anything right?