Credential theft escalates as threat actors use stealthier tactics

Summary

Cybercriminals are evolving their tactics, turning to stealthier methods like credential theft and infostealing while ransomware attacks on enterprises have declined. IBM X-Force reports a 84% surge in emails delivering infostealers, with attackers exploiting hybrid cloud environments to infiltrate critical infrastructure, which accounted for 70% of all incidents. The rise in data theft over encryption reflects pressure from advanced detection and law enforcement, while phishing campaigns using AI are fueling credential breaches, with nearly a third of incidents involving stolen login info.

Additional Summaries

Cybercriminals are shifting tactics, with an 84% increase in emails delivering infostealers and a decline in ransomware attacks on enterprises. Critical infrastructure organizations were targeted in 70% of all attacks last year, often due to vulnerability exploitation. Data theft is rising as attackers avoid detection, with credential theft occurring in nearly one-third of incidents. Asia and North America are the most attacked regions globally. IBM recommends proactive measures like modernizing authentication management and real-time threat hunting.

Cybercriminals are leveraging stealthy tactics like credential theft with lower profiles, while ransomware attacks on enterprises have declined, driven by an 84% surge in emails delivering malicious links that exploit identity gaps. Critical infrastructure organizations remain the top targets, with attackers exploiting vulnerabilities and using multi-step approaches to access and monetize sensitive data. As detection tools and law enforcement intensify efforts, cybercriminals are increasingly turning to quicker methods like data theft rather than encryption.

Cybercriminals are pivoting to stealthier tactics, with lower-profile credential theft spiking, while ransomware attacks on enterprises have declined. Critical infrastructure organizations have accounted for 70 percent of all attacks that IBM X-Force responded to last year, with more than a quarter of these attacks caused by vulnerability exploitation. Almost one in three incidents observed in 2024 resulted in credential theft, as attackers invest in multiple pathways to quickly access, exfiltrate and monetize login information. This upward trend fueling follow-on account takeovers may be attributed to attackers employing AI to create phishing emails at scale. You can get the full report from the IBM site and there will be a webinar to discuss the findings on April 22nd at 11am ET.

Additional Summaries