APT10 exploits stolen credentials from a managed service provider to infiltrate the aerospace company's network, setting the stage for a prolonged espionage campaign. Anomalous login detected from an external IP address using compromised MSP credentials.