Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: To move laterally on a victim network, FIN6 has used credentials stolen from various systems on which it gathered usernames and password hashes.