Identity Attacks Overtake Exploits as Top Ransomware Cause

Email attacks became the leading cause of ransomware incidents, surpassing exploits. In nearly all credential-based attacks, multifactor authentication was in place, yet it failed to prevent the compromise from occurring. This shift in ransomware root cause indicates a change in the tactics used by attackers. The use of email attacks as the primary vector suggests that attackers are targeting users directly. Multifactor authentication, despite being widely deployed, was not effective in preventing these compromises. The failure of multifactor authentication in these cases highlights the need for additional security measures.