Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
IP70.187.192.236HighIP72.49.91.23HighIP67.217.49.66HighIP87.121.84.174HighIP142.11.206.73HighSHA25692ff08773995ebc8d55ec4b8e1a225d0d1e51efa4ef88b8849d0071230c9645aHighDomainsfrclak.comHighDomain0x666.infoHighIP45.86.230.77HighIP195.26.248.212HighIP199.217.98.21HighIP107.172.135.18HighIP198.46.173.36HighIP38.240.51.74HighIP64.94.85.14HighIP38.240.51.143HighIP193.149.176.50HighIP185.114.206.45HighIP178.16.55.23HighIP66.94.102.6HighIP162.217.248.219HighIP162.33.179.249HighIP144.172.116.47HighIP23.160.168.174HighIP46.16.34.62HighIP103.89.12.159HighIP172.245.246.86HighIP209.50.250.33HighIP165.154.36.91HighIP165.154.182.221HighIP103.114.163.188HighIP37.19.200.5HighIP162.33.177.177HighIP51.222.96.58HighIP45.58.52.60HighIP216.189.159.35HighIP187.15.88.186HighIP187.15.90.217HighIP187.15.89.186HighIP198.12.106.60MediumIP146.19.216.119HighIP146.19.216.120HighIP146.19.216.125HighIP104.207.144.154HighIP134.199.225.24HighIP146.190.146.169HighIP162.252.172.74HighIP24.144.95.61HighIP104.238.133.25HighIP104.238.38.202High
…