Credential theft is the unauthorized capture of usernames, passwords, tokens or session cookies so an attacker can sign in to systems as a legitimate user. It happens through phishing, infostealer malware, keyloggers or breaches of other services. For example, a corporate email password entered on a fake login page can give access to Microsoft 365 without installing any malware.
Go deeper on the TecnetBlog: Password Policy: How to Require Strong Passwords at Work
stolen credentials, password theft, credential harvesting, account takeover, session token theft