Chinese threat actor APT10 used stolen remote access software credentials to infiltrate the network of Norwegian MSP Visma and other businesses last year.