In 2024, researchers observed an 84% increase in phishing emails which delivered infostealers compared to the year before. This is a method that threat actors rely on heavily to scale identity attacks. 70% of attacks in 2024 involved critical infrastructure, and malware was deployed in 40% of cases. Nearly one third of incidents in 2024 resulted in credential theft. Critical infrastructure organizations are faced with challenges, resulting from their reliance on legacy technology. 

Read more: https://www.helpnetsecurity.com/2025/04/23/cybercriminals-credential-theft-tactics/