Phishing platforms, infostealers blamed as identity attacks soar

Researchers report a sharp increase in identity-centric attacks—driven by sophisticated, low-cost phishing-as-a-service (notably Tycoon 2FA) and inexpensive infostealer logs—leading to more business email compromise and potential ransomware incidents; organizations are advised to adopt phishing-resistant authentication (passkeys), strengthen identity monitoring, and prepare rapid incident response.