Overview
In March 2026, Void Manticore (Handala) executed a six-phase attack against Stryker Corporation — one of the world's largest medical device manufacturers. The attack unfolded over approximately six months, exfiltrating 50TB of data including patient records, medical device IP, and financial information, before culminating in a simultaneous four-vector wipe that took 200,000+ devices offline across 79 countries.
Every phase of this attack exploited one assumption: that surfaces are static. VPN credentials persist indefinitely. AD credentials, once harvested, remain valid. Database locations, once mapped, stay mapped. Management plane actions, once authorised by credential, execute unconditionally. ACSE removes every one of these assumptions at the cryptographic layer.
Every phase of the Handala attack worked because every surface was static. It persisted long enough for the attacker to find it, map it, and exploit it. PME's fundamental thesis: a surface that doesn't exist cannot be exploited. Dwell time with ACSE = 0 usable reconnaissance.
The Intune MDM weaponisation is new territory. No existing security product defends the management plane against admin credential abuse at the protocol layer. ASMP/1.0 MSG-005 (TEE-rooted rotating attestation handshake) is the first protocol-level answer: admin credential is necessary but not sufficient — you also need a fresh TEE-attested token valid for exactly one mutation cycle.
Kill Chain — All 6 Phases
The table below shows each phase, the surface exploited, why traditional defence failed, and how ACSE defeats it. Detail follows for each phase.
| Phase | Action | Surface Exploited | Traditional Result | ACSE Profile | ACSE Result |
|---|---|---|---|---|---|
| 01 | VPN Brute-Force | Static VPN credentials | Foothold established | AnglerShield 0x06 | ❌ Surface expired |
| 02 | LSASS Dump + ADRecon | Static AD credentials | Domain Admin achieved | KrakenNet 0x05 | ❌ Dump contains expired tokens |
| 03 | NetBird lateral movement | Static RDP endpoints + host IDs | Network segmentation bypassed | AnglerShield + MantisNet | ❌ Lure capture + mesh collapses |
| 04 | Intune MDM wipe | Static admin credential = kill switch | 200K+ devices wiped | ASMP MSG-005 | ❌ Wipe rejected at protocol layer |
| 05 | 50TB slow exfil | Static DB location + access tokens | 50TB exfiltrated over 6 months | NautilusVault 0x07 | ❌ Zero bytes — surface expired |
| 06 | 4-vector wipe | Static GPO + DC management surface | 79 countries offline | LeviathanGrid 0x0A | ❌ GPO wiper is a no-op |
Hundreds of logon attempts from Starlink IP ranges and commercial VPN nodes (169.150.227.x). Low-and-slow to avoid lockout triggers. A stolen credential — from a dark-web dump, phishing, or IT service provider compromise — is valid indefinitely. MFA may block some attempts but MDM-managed authenticators are later wiped by the same attacker. One valid credential opens the door.
AnglerShield rotates the VPN surface token every mutation cycle (31.67µs). The stolen credential maps to a cryptographic state that no longer exists. Repeated failures with expired tokens push the EWMA anomaly score above the Hunter threshold (0.35). Forced Twitch fires at 107/107 — the attacker self-identifies as a scanner before gaining any foothold. Dwell time: zero.
Windows Defender disabled via Group Policy. rundll32.exe comsvcs.dll MiniDump dumps LSASS — all credentials in memory extracted. ADRecon (dra.ps1) maps the entire Active Directory: users, groups, OUs, GPOs, trusts, subnets, computers. This map is valid for months because nothing changes. Domain Admin achieved via NTLM hash or Kerberos ticket.
KrakenNet rotates the LSASS credential surface every 28.56µs. The dump contains SHA3-derived tokens valid only for cycle N. By the time the attacker attempts to use them (cycle N+k), all tokens are cryptographically expired — the dump is a dead file. The ADRecon map accurately describes a surface that no longer exists. Reconnaissance investment is permanently stranded. Every event SHA3-chained and TEE-signed.
NetBird downloaded from netbird.io — legitimate signed software, no AV alert possible. Encrypted peer-to-peer mesh created across 5+ machines. VLAN segmentation bypassed. Domain Controller reached via mesh. All 200,000+ domain hosts now reachable via GPO push. Legitimate tool, impossible to detect by signature.
AnglerShield's 4-lure rotation means 3 of 4 RDP endpoints in the estate at any moment are cryptographic lures. Attacker connects to a lure — gets an instrumented session. MantisNet rotates host identity tokens every 10.31µs — NetBird requires a stable host identifier to maintain peer connectivity. Mesh collapses: each node's identity has expired before the coordinator refreshes. Anomaly score crosses main_organ_threshold. Defensive Leap initiates.
Phase 4 — MDM Weaponisation ★ Key Patent Claim
No existing security product requires a time-bounded, hardware-attested token to authorise MDM management actions. ASMP MSG-005 is the first protocol-level answer. Admin credential is necessary but not sufficient — you also need a fresh TEE-attested token valid for exactly one mutation cycle (15–143µs depending on profile). Without the token, the wipe command is rejected before it reaches Intune's execution engine.
Domain Admin credentials valid for Azure AD / Intune admin portal. Attacker logs in to the MDM management console — the same console Stryker's IT team uses. Single admin action issues remote wipe to every enrolled device: servers, laptops, mobile phones, BYOD devices. Personal phones included — 2FA authenticator apps wiped. Employees locked out of all systems across 79 countries. No existing product defends this. The admin credential IS the kill switch.
ASMP/1.0 MSG-005 wraps the MDM management plane. Every management action — including remote wipe — requires a valid TEE-attested trust token derived from the current mutation cycle's entropy, signed inside Intel SGX / AWS Nitro, expiring within one cycle. The attacker has the admin credential. They do not have a fresh TEE-attested token. To get one they would need to be inside the enclave. The wipe command is rejected at the ASMP protocol layer. SOC alerted in real time with full forensic context.
50TB exfiltrated over ~6 months in small encrypted batches via C2 channel at 107.189.19.52. Stays below SIEM volume thresholds (~280GB/day is within backup traffic ranges). Medical device specs, clinical trial data, patient records, financial data — all accessible because static database location obtained in Phase 2 ADRecon map. Data gone before breach declared.
NautilusVault rotates the database access token, internal address reference, and connection surface every 37.96µs. The tokens from the ADRecon dump are stale. The DB address from the map points to a surface that no longer accepts the harvested credentials. Query rejected. C2 coherence lost — attacker has no persistent foothold with a stable identity to stage data from. 50TB never moves. Zero bytes exfiltrated.
Four wipers deployed simultaneously: (1) Handala Wiper via GPO logon script — not written to disk, run from DC remotely. (2) Handala PS Wiper — AI-generated PowerShell, no prior signature. (3) MBR overwrite — boot record destroyed. (4) Intune MDM wipe — all enrolled devices. All four fired simultaneously. AV cannot detect disk-less wiper. SIEM sees the wipe but response time is irrelevant — 60–90 seconds per machine, 1,000 machines in parallel. 79 countries offline before SOC acknowledges the first alert.
LeviathanGrid rotates the DC's visible identity, Group Policy API surface, and management tokens every 143.9µs. The GPO push targets stale DC surface coordinates. The wiper payload fires to a remapped address — no-op. Intune MDM wipe already rejected at Phase 4 (ASMP MSG-005). Defensive Leap (ASMP MSG-004) fires: all surfaces across the entire estate rotate simultaneously. 499/499 unique tokens, 7.9885 bits/byte entropy. Complete forensic record SHA3-chained and TEE-signed. CISO can prove mathematically that no data was accessed.