Attackers increase their level of access to sensitive information and systems by:
1. Exploiting software vulnerabilities to gain administrative rights
2. Abusing administrator credentials obtained through social engineering or phishing attacks
3. Utilizing misconfigured or poorly secured systems, such as shared accounts with high-level privileges
4. Lateral movement using password attacks or credential theft
5. AD privilege escalation through attacks or credential abuse