https://www.group-ib.com/blog/pam-harvesting-insight/
Understanding Credential Harvesting via PAM: A Real-World Threat