Companies: Every third attack involves stolen account data
Freshly stolen account credentials are increasingly being used by cybercriminals for attacks. According to Kaspersky analysis, legitimate accounts represented the initial attack vector in 31 percent of security incidents last year, compared to just 20 percent the previous year—a sharp increase. This trend indicates that companies are increasingly becoming targets of initial access brokers (IABs), which sell stolen credentials on the dark web, enabling follow-up attacks. Cybercriminals particularly benefit from IABs in activities related to ransomware-as-a-service (RaaS). According to Kaspersky data, the accounts of victims were often previously compromised. This shows that the leaked credentials…
