Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
IP190.115.12.16HighIP190.111.12.242HighIP190.56.117.218HighIP190.148.112.242MediumIP190.115.5.17MediumIP186.151.190.65MediumIP190.148.128.45MediumIP190.143.185.117Medium