An account takeover occurs when “a malicious third party successfully gains access to a user’s account credentials. By posing as a real user, cybercriminals can change account details, send out phishing emails, steal financial information or sensitive data, or use any stolen information to access further accounts within the organization.” |