What is an account takeover (ATO) attack?

In an account takeover (ATO) attack, an attacker gains unauthorized access to the credentials for a user’s online account. This access can then be used for identity theft, fraud, and to enable other cyberattacks, such as using access to a user’s corporate credentials to login and plant ransomware within the corporate network.

What are the ramifications of a successful account takeover?

Successful account takeover can have far-reaching ramifications including the exfiltration of sensitive data, financial theft, credit card fraud, and software supply chain attacks. These attacks often exploit the inherent weaknesses of using passwords as an authentication method.

Are account takeovers a form of identity theft?

Attacks involving account takeovers cause a type of identity theft. Users typically don’t modify passwords regularly, and they reuse login details over various sites. Attackers can use bots to easily carry out credential stuffing and brute force attacks, by rolling through many password and username combinations to accomplish account takeover.

What is corporate account takeover (Cato)?

Corporate account takeover (CATO) is a form of account takeover where the victim’s account is a work account as opposed to an account for personal use.