Tag lateral movement in cyber attacks