Anomalous credential harvesting activities detected from an internal host indicating potential lateral movement by the IceFog APT group. The attacker is utilizing compromised credentials to access additional systems within the network.