Identity Is the New Attack Surface

At Smarttech247, 60% of analyst investigations involve identity-focused threats, most originating from compromised credentials via phishing. This report covers:

• The top 5 identity threats of 2025, from Phishing-as-a-Service to machine identity exploitation
• 156% increase in identity-driven attacks between 2023 and 2025
• 548 million credentials exfiltrated via infostealer malware in 2024
• Machine identities now outnumber human identities 80:1, many over-privileged
• Actionable recommendations: phish-resistant authentication, risk-based conditional access, and device compliance