Account compromise threats up nearly 400 percent in the past year

Last year saw a 389 percent increase in account compromise threats compared to 2024 according to a new report from eSentire’s Threat Response Unit. The attempted theft of corporate account credentials, especially Microsoft 365 accounts, made up 50 percent of threats analyzed. The findings, based on extensive threat and incident data collected from eSentire's 2,000+ global customers, highlights the dramatic rise of Phishing-as-a-Service (PhaaS) offerings as a primary attack vector. Email-initiated account compromises rose from 36.9 percent to 55 percent of total security incidents, with PhaaS-related threats accounting for 63 percent of all account compromise cases. "These PhaaS kits are… [Continue Reading]