Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
CVE-2026-28318
CVE-2021-35211
CVE-2024-28995