Sign in to unlock valuable content and features from our AI-driven platform. Receive timely technology updates and the latest information from the solution providers who can help you realize your goals.
Start your journey by entering your name and email address below:
Please confirm your email address!
We are going to send a confirmation email to your email address to let you receive timely technology updates and the latest information from the solution providers who can help you realize your goals.
Is this you? Please confirm your name and email address below to receive the requested information.
Please check this box to confirm that you are opting-in to receive communications from Thales Security and the data sharing outlined in our privacy policy.
Initializing
Loading
Identity-Centric Threats: The New Reality
Identity is the new perimeter, and attackers are exploiting it. The analyst report, "Identity-Centric Threats: The New Reality," reveals how identity-driven attacks now account for nearly 60% of all confirmed incidents, powered by Phishing-as-a-Service platforms, infostealer malware, and credential marketplaces. Download the report for in-depth insights and contact Thales Security for guidance on protecting your organization's digital identity footprint.
Please enter your information below to view this content:
Identity-centric threats focus on compromising user identities to gain access to valuable organizational assets. Unlike traditional cyberattacks that exploit technical vulnerabilities, these modern threats leverage compromised credentials, which are easier to obtain and can bypass conventional security measures. Recent data shows that identity-driven threats have surged by 156% between 2023 and 2025, now accounting for 59% of all confirmed threat cases in Q1 2025.
How has Cybercrime-as-a-Service impacted identity theft?
Cybercrime-as-a-Service platforms have reshaped the landscape of cyber threats by lowering the entry barrier for threat actors. These services, such as Phishing-as-a-Service platforms, provide sophisticated tools for executing identity theft campaigns. For instance, Tycoon2FA, a leading PhaaS platform, accounts for 58% of observed account compromise cases and can be rented for as little as $200-300 per month. This model allows even those with limited technical skills to engage in complex cyberattacks.
What measures can organizations take to combat identity threats?
Organizations should rethink their security posture by assuming that identities will be compromised. This includes implementing continuous authentication verification, comprehensive credential monitoring, and rapid response capabilities for identity-based threats. Additionally, employing a 24/7 Managed Detection and Response service can help detect and respond to identity threats effectively, allowing organizations to revoke session tokens and terminate active sessions when necessary.
Identity-Centric Threats: The New Reality
published by Thales Security
Businesses and governments rely on Thales to bring trust to the billions of transactions they have with people. Our identity and data protection technologies help banks exchange funds, people cross borders, energy become smarter, and much more. More than 30,000 organizations already rely on Thales solutions to verify the identity of people and things, grant access to digital services, analyze vast quantities of information and encrypt data.
Sign in with LinkedIn