Identity-based threats are growing in prevalence, and according to a report from eSentire, info-stealing malware and advanced phishing kits account for 156% increase in cyberattacks that target user logins. 

The research finds that malicious actors are often accessing login credentials and session cookies via malware and phishing in order to carry out business email compromise (BEC) attacks, gain access to bank accounts, or take cryptocurrency from accounts. 

Phishing-as-a-service platforms are making it simpler to carry out cyberattacks with minimal technical experience, providing pre-made phishing pages for popular platforms such as Microsoft 365 and Google Workspace. 

Infostealers are also offered as a service. According to the report, they account for 35% of detected malware threats in 2025. Passwords stored in browsers are often a target due to their convenience.