Credential Theft: How Attackers Steal & Use Stolen Credentials
Huntress explains how attackers steal credentials through phishing, AitM, infostealers, and dumping, then use them for lateral movement, BEC, and ransomware.
15
Vendor
Mimikatz
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 8, 2026
- Last mentionedSep 10, 2026
Timeline
2 articles · newest firstHackers Disable Endpoint Protection and Deploy Sliver Across Compromised Windows Domain
The Hunter's Ledger tracked campaign UTA-2026-024 using Sliver C2, Domain Admin account creation, and Ethereum-based C2 rotation to compromise a US organization's Windows domain.
45
Appears with
- UTA-2026-024threat actor · 1
- Slivermalware · 1
- Huntressvendor · 1
- Huntressorganization · 1
- The Hunter's Ledgerorganization · 1
- PrintSpoofervendor · 1
- infostealersmalware · 1
- Slivervendor · 1
- Active Directoryproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.