DEEP#DOOR embeds a Python RAT in a dropper script, using bore[.]pub C2 to steal credentials and evade Windows defenses, ...
This was not a case of stolen credentials, but rather of vulnerability exploitation.