Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
forbes.ru
CVE-2023-38831
CVE-2023-23397