Stolen Credentials Surpass Phishing for Cloud Breaches

TL;DR

• Stolen credentials have become the primary method for cloud breaches, surpassing email phishing.
• Mandiant’s report highlights the ease of acquiring compromised login details as a significant factor.
• Enhanced security measures are essential to combat this growing threat.

Stolen Credentials: The New Dominant Threat in Cloud Security

The Shift in Cyberattack Methods

Cybercriminals are increasingly leveraging stolen credentials to infiltrate IT systems, marking a significant shift from traditional email phishing tactics. According to Mandiant’s latest report, compromised login details have become the second most common initial infection vector, highlighting the urgent need for enhanced security measures¹.

Ease of Access to Stolen Credentials

The prevalence of stolen credentials can be attributed to their easy availability. Cybercriminals can acquire these details through various means, including data breaches, malware, and dark web marketplaces. This shift underscores the importance of robust credential management and advanced authentication methods to safeguard cloud environments².

Implications for Cloud Security

As organizations increasingly adopt cloud services, the risk of credential-based attacks grows. IT professionals must implement stringent security protocols, including multi-factor authentication (MFA), regular credential audits, and employee training on cybersecurity best practices. These measures are crucial in mitigating the risks associated with stolen credentials and protecting sensitive data³.

Conclusion

The rise of stolen credentials as a primary attack vector underscores the evolving landscape of cyber threats. Organizations must stay vigilant and proactive in their security strategies to protect against these emerging risks. By adopting comprehensive security measures, companies can better safeguard their digital assets and maintain trust in their cloud operations.

Additional Resources

For further insights, check:

• Mandiant’s Report on Stolen Credentials

References

1. (2025, April 23). “Stolen credentials edge out email tricks for cloud break-ins because they’re so easy to get”. The Register. Retrieved April 23, 2025. ↩︎

2. (2025, April 23). “Stolen credentials edge out email tricks for cloud break-ins because they’re so easy to get”. The Register. Retrieved April 23, 2025. ↩︎

3. (2025, April 23). “Stolen credentials edge out email tricks for cloud break-ins because they’re so easy to get”. The Register. Retrieved April 23, 2025. ↩︎