A new 2025 report by IBM shows that nearly half of all cyberattacks resulted in stolen data or credentials, and identity abuse was the preferred entry point.
There was an 84% increase in emails delivering infostealers in 2024 compared to the year before, a method threat actors relied heavily on to scale identity attacks.
Nearly one in three incidents in 2024 also resulted in credential theft.
Collectively accounting for nearly 60% of all attacks that IBM X-Force responded to globally, Asia (34%) and North America (24%) experienced more cyberattacks than any other region in 2024.