Account Takeover attacks are increasing as cybercriminals and even amateurs are using this technique to create more sophisticated phishing campaigns. The most sophisticated of these attacks use stolen credentials from high-ranking executives to launch a Business Email Compromise (BEC) scheme using the employee’s real email address. In 2017, BEC incidents resulted in losses totaling $675 million for US firms and are considered a significant problem for law enforcement along with other attacks such as ransomware. The market for buying and selling stolen credentials is growing, and there is a growing economic incentive to steal credentials.”]
Source: https://www.darkreading.com/abtv/phishing/account-takeover-attacks-are-on-the-rise/a/d-id/746227