More Attackers Are Logging In, Not Breaking In

Recorded Future's 2025 analysis documents a sharp increase in credential theft—nearly two billion credentials indexed from malware combo lists and 276 million active session cookies—driven by industrialized infostealers, malware-as-a-service, and AI-enabled phishing; these trends enable MFA bypass and large-scale, stealthy account takeover, prompting recommendations for continuous identity monitoring, phishing-resistant MFA (e.g., FIDO2), and strict vaulting and rotation of high-risk credentials.