Use of stolen credentials is the biggest web threat, says the most recent Verizon Data Breach Report. A working definition of the use of stolen credentials is available on an OWASP page. The occurance of stolen creds rose from #7 in 2009 to #1 in 2013. 2013 is the most recent data. Here at Shape Security, we hear about stolen credentials, credential stuffing and account checkers every day. We've also blogged about what Gartner told us. According to Gartner's fraud expert Avivah Litan, "clients have reported a significant rise over the last two months in the use of stolen credentials to access accounts".
Contact Shape if you would like our help protecting your site from the use of stolen credentials. Our technology blocks account checkers, credential stuffing and other automated attacks.