Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
IP204.76.203.7MediumIP204.76.203.30MediumIP204.76.203.8MediumIP204.76.203.125MediumIP204.76.203.196MediumDomainfycextras.comHighIP204.76.203.206MediumIP204.76.203.189Medium