Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: FIN6 has used a script to iterate through a list of compromised PoS systems, copy and remove data to a log file, and to bind to events from the submit payment button.