PHISHING PLATFORMS, INFOSTEALERS BLAMED AS IDENTITY ATTACKS SOAR

Summary from the TLDR InfoSec newsletter

Identity-based cyberattacks increased 156% due to advanced phishing kits such as Tycoon 2FA and info-stealing malware. Phishing-as-a-service platforms, which cost $200-$300 monthly, make sophisticated attacks accessible, now comprising 59% of security investigations, often resulting in business email compromise (BEC) and ransomware.