Adversary impersonates users or privileged users through fraudulent or stolen credentials or digital certificates