Cybercriminals are ditching hacking into corporate networks and are instead using legitimate credentials to access and compromise them, with a 71% spike in cyber-attacks caused by exploiting identity, according to IBM.
In its 2024 X-Force Threat Intelligence Index, published on February 21, 2024, IBM observed that compromising valid identities represented 30% of the total initial access vectors used in 2023.
This represents a big jump from 2022, when this method only accounted for 16% of initial access vectors.
Phishing also represented 30% of the initial access vectors used in 2023, an 11% drop compared to 2022.
Tags:
No tags.
