From Exposure to Takeover: Part 1. Beg, Borrow, and Steal Your Way In

This report examines account takeover (ATO) threats and the underground economy for stolen credentials, detailing how attackers harvest, buy, rent, or freely share accounts; it highlights credential-stealing malware and phishing, marketplace dynamics (including Genesis Market and forum listings), the sale of privileged/domain admin access (noting listings up to $140,000), and large-scale data availability (over 15 billion credentials discovered), illustrating widespread risk to financial, streaming, VPN, and enterprise accounts.