Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: APT37 has used a credential stealer known as ZUMKONG that can harvest usernames and passwords stored in browsers.