Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: BlackEnergy has used a plug-in to gather credentials from web browsers including FireFox, Google Chrome, and Internet Explorer.