Recent reports of a newly detected Smoke Loader infection campaign and the re-emergence of Magecart-based cyber-attacks illustrate a common tactic used by cyber criminals and state-sponsored attackers alike ― credential harvesting. According to the Verizon 2017 Data Breach Investigation Report, 81% of hacking-related breaches leverage either stolen, default, or weak credentials.
http://feedproxy.google.com/~r/Securityweek/~3/rqLmusGOGfc/foundation-cyber-attacks-credential-harvesting
