SpyCloud：2024年度身份暴露报告 英文版 .docxVIP

IDENTITYREPOR

IDENTITY

REPORT

EXPOSUREANALYSISOFNEXT-LEVELCYBERTHREATS,UNLOCKED

PRESSSTART

TALEOFBCONTE

TALE

THEDIGITALIDENTITYIN2023 2

WELCOMETOTHESHOWDOWN:CYBERCRIMINALSSTEPUPTHEIRGAME 3

THEFIGHTOVERDIGITALIDENTITIES 4

WHYWEDOTHISREPORT 5

OURSECRETWEAPON:SPYCLOUDRECAPTUREDDATA 6

TRENDS 6

USERVS.CRIMINAL:THE2023IDENTITYEXPOSUREARENA 7

DIGITALIDENTITIESAREATOPATTACKVECTOR 8

MALWAREINFECTIONSASAMAJORPLAYERINIDENTITYEXPOSURE 9

123456:EXPOSEDPOPULARPASSWORDS 10

SINGLEDOUT:THEGOVERNMENTSECTOR 11

PASSGO,COLLECT200PII 12

MALWARETRUMPSALL,THOUGH 15

MALWARE’SNEXTMOVE:INFOSTEALERFAMILIESTOWATCH 16

ANDANEWCHARACTERENTERSTHEGAME:MOBILEMALWARE 17

OTHEREASTEREGGS 17

THEVICTORYTOKEN:STOLENSESSIONCOOKIES 18

GOTTARECAPTURE‘EMALL:NOTABLEDATABREACHES 19

TURNINGTHEGAMEINYOURFAVOR–ANDAGAINSTCYBERCRIMINALS 22

THESTAKESAREHIGH:WHAT’SNEXT 23

THEPLAYERAVERAG

THE

PLAYER

4UNIQUEEXPOSEDUSERNAMES/EMAILADDRESSES

67%OFEMAILSACCOMPANIEDBYACOMPROMISEDPASSWORD

9BREACHES

15BREACHRECORDS

1IN4RECORDSCONTAINEDINFORMATIONABOUTTHE

USERNETWORKORPHYSICALLOCATION

1IN5CHANCEOFALREADYBEINGTHEVICTIM

OFANINFOSTEALERINFECTION

DIGITALIN2023THE

DIGITAL

IN2023

Basedonouranalysis

oftheaveragedigital

identityexposedand

tradedinthecriminal

underground

lastyear

–––BASEDONASAMPLEOFDATASPYCLOUDRECAPTUREDFROMTHECRIMINALUNDERGROUNDIN2023.

SHOWDOW:STAGE

SHOWDOW:

WELCOMETONTHE

CYBERCRIMINALSSTEPUPTHEIRGAME

BACK NEXTNEXT

4

THEFIGHTOVERDIGITALIDENTITIES

Digitalidentitiesareembeddedinourlives,andtheirexpansivenessmakesitharderandhardertoprotectour

accountsandbusinesssystemsfromattacks.Datastolenbycriminalsandtradedbetweenbadactorshas

continuedtoscaledramaticallyeachyear.Caseinpoint:SpyCloud’stotalcollectionofrecaptureddatahas

growntomorethan43.7billiondistinctidentityre