Overall, cybercriminals have become increasingly sophisticated and specific when targeting organisations as well as their users.

Often, they work to identify the users and their device(s), providing access to an influx of sensitive and highly confidential data, such as financials.

Credential-based attacks open the door for more repeatable attacks, as they allow threat actors to take on the personality of an individual that is authorised to access targeted data, making every attack an insider threat.

Common methods used by cybercriminals include Phishing, Malware, Brute Force Attacks, Exploiting Weak/Default credentials, Credential Stuffing and Exploiting Vulnerabilities.

Source