Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
IP172.94.15.211HighIP188.40.64.61HighIP2.27.63.150HighIP185.238.191.37HighIP2.27.62.140HighIP155.117.183.31HighIP91.236.186.56HighIP217.160.43.170HighIP196.251.107.104HighIP103.27.157.18HighIP176.9.19.209HighIP104.194.158.65HighIP217.154.217.139HighIP217.154.162.45HighIP2.26.252.48HighIP88.99.149.241HighIP3.121.234.29HighIP43.228.157.171HighIP196.251.121.249HighIP2.27.248.80HighIP2.28.107.84HighIP164.90.160.181HighIP2.26.30.186HighIP84.247.187.47HighIP2.27.248.33HighIP89.106.83.225HighIP209.38.224.48HighIP158.94.208.152HighIP104.243.248.63HighIP130.61.85.204HighIP138.124.240.76HighIP217.20.120.84HighIP159.195.193.179HighIP93.152.223.242HighIP154.193.160.247HighIP31.13.190.58HighIP144.172.69.79HighIP89.163.157.131HighIP155.102.136.60HighIP151.240.151.76HighIP63.186.47.151HighIP177.3.213.149HighIP167.99.139.231HighIP45.135.193.111HighIP185.147.159.251HighIP5.175.169.209HighIP93.152.223.158HighIP151.240.151.67HighIP193.222.99.152HighIP104.105.15.96High
…