Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: APT28 sent spearphishing emails which used a URL-shortener service to masquerade as a legitimate service and to redirect targets to credential harvesting sites.