Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: XCSSET uses a malicious browser application to replace the legitimate browser in order to continuously capture credentials, monitor web traffic, and download additional modules.