Malicious logins from suspicious infrastructure fuel identity-based incidents

69% of identity-based incidents involved malicious logins from suspicious infrastructure, which are hosting providers or proxies that aren’t expected for a user or organization, according to Expel. Identity-based incidents accounted for 64% of all incidents investigated by the Expel SOC, a volume increase of 144% from 2022 to 2023. Phishing-as-a-service drives identity-based incidents The increased volume of identity incidents directly results from more phishing platforms becoming available on the dark market. “Phishing-as-a-service (PhaaS)” platforms allow … More →

The post Malicious logins from suspicious infrastructure fuel identity-based incidents appeared first on Help Net Security.