SpyCloud：2024年度身份暴露报告（英文版）（24页）.pdf

1、P12024IDENTITYEXPOSUREREPORTANALYSIS OF NEXT-LEVEL CYBER THREATS,UNLOCKEDTHE DIGITAL IDENTITY IN 2023WELCOME TO THE SHOWDOWN:CYBERCRIMINALS STEP UP THEIR GAMETHE FIGHT OVER DIGITAL IDENTITIESWHY WE DO THIS REPORTOUR SECRET WEAPON:SPYCLOUD RECAPTURED DATATRENDSUSER VS.CRIMINAL:THE 2023 IDENTITY EXPOS

2、URE ARENADIGITAL IDENTITIES ARE A TOP ATTACK VECTORMALWARE INFECTIONS AS A MAJOR PLAYER IN IDENTITY EXPOSURE123456:EXPOSED POPULAR PASSWORDSSINGLED OUT:THE GOVERNMENT SECTORPASS GO,COLLECT 200 PIIMALWARE TRUMPS ALL,THOUGHMALWARES NEXT MOVE:INFOSTEALER FAMILIES TO WATCHAND A NEW CHARACTER ENTERS THE

3、GAME:MOBILE MALWAREOTHER EASTER EGGSTHE VICTORY TOKEN:STOLEN SESSION COOKIESGOTTA RECAPTURE EM ALL:NOTABLE DATA BREACHESTURNING THE GAME IN YOUR FAVOR AND AGAINST CYBERCRIMINALSTHE STAKES ARE HIGH:WHATS NEXT2345667891011121516171718192223TABLEOF CONTENTS BASED ON A SAMPLE OF DATA SPYCLOUD RECAPTURED

4、 FROM THE CRIMINAL UNDERGROUND IN 2023.THEDIGITALIDENTITYIN 20231 IN 4 RECORDSCONTAINED INFORMATION ABOUT THEUSER NETWORK OR PHYSICAL LOCATION1 IN 5 CHANCEOF ALREADY BEING THE VICTIMOF AN INFOSTEALER INFECTIONBased on our analysis of the average digital identity exposed and traded in the criminal un

5、dergroundlast yearTHEAVERAGEPLAYER9 BREACHES15 BREACH RECORDS4 UNIQUE EXPOSEDUSERNAMES/EMAIL ADDRESSES67%OF EMAILSACCOMPANIED BY A COMPROMISED PASSWORDWELCOME TO THE SHOWDOWN:3CYBERCRIMINALS STEP UP THEIR GAMESTAGE 1NEXTNEXTNEXTNEXTBACKBACK4THE FIGHT OVER DIGITAL IDENTITIESDigital identities are emb

6、edded in our lives,and their expansiveness makes it harder and harder to protect our accounts and business systems from attacks.Data stolen by criminals and traded between bad actors has continued to scale dramatically each year.Case in point:SpyClouds total collection of recaptured data has grown t