Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: BlackEnergy has used a plug-in to gather credentials stored in files on the host by various software programs, including The Bat! email client, Outlook, and Windows Credential Store.