Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
CVE-2023-7028