Data Breaches, Phishing, or Malware?: Understanding the Risks of Stolen Credentials
Data Breaches, Phishing, or Malware?: Understanding the Risks of Stolen Credentials
Kurt Thomas,Frank H. Li,10 Authors,Elie Bursztein
2017 · DOI: 10.1145/3133956.3134067
Conference on Computer and Communications Security · 256 Citations
TLDR
The first longitudinal measurement study of the underground ecosystem fueling credential theft and the risk it poses to millions of users is presented and a remarkable lack of external pressure on bad actors is observed, with phishing kit playbooks and keylogger capabilities remaining largely unchanged since the mid-2000s.