An attacker accessed Slack and retrieved exposed credentials, utilizing them to maintain persistent access within the network. The retrieved credentials were then used to access several internal systems.