Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: Kessel has trojanized the <sode>ssh_login</code> and <code>user-auth_pubkey</code> functions to steal plaintext credentials.