The Rise of Credential Steelers

A lot of these cases were starting with kind of lower level actors that could just buy credentials off of somewhere on the dark web or forums. So it at least presented additional challenges for organizations because rather than kind of stopping something at the edge, the attackers are coming in with something they otherwise wouldn't have had. The fact a lot of these credential Steelers are automated and widely distributed, I think presents a larger threat as a whole.