Threat actor exploited account credentials swept up by infostealers years earlier.