At least 15 billion credentials are currently circulating on various hacker forums, giving cybercriminals fodder for account takeover attacks and identity renting services. The most expensive accounts are for domain administrator access, auctioned to get the best price because they provide the highest levels of trust and control on a network. The only obstacle in their way is that credentials rarely come in plain text these days and many services check for fingerprint data to identify unauthorized login attempts. Cybercriminals can pay less than $10 to log into an account for a limited period using the victim’s fingerprint data.
Source: https://www.bleepingcomputer.com/news/security/over-15-billion-credentials-in-circulation-on-hacker-forums/