The Pioneer Kitten attackers are monetizing their access to compromised organizations’ networks by selling domain admin credentials and full domain control privileges on cybercrime marketplaces.
Source: cyware.com