Credential Harvesting

Occurs when the login credentials for webmail, domain access, VPN access, etc. are collected via a compromised web browser, application, malware or DNS server. This can have serious ramifications for an organisation’s security as these login credentials give the attacker the keys to the kingdom, and this type of attack is very difficult to detect.