Over two billion credentials were stolen in 2017 and contributed to the complex problem of credential spills, credential stuffing and account takeover fraud.

The market for automated credential stuffing tools is growing fast, because of a record number of breaches.

Akamai warns that attackers are compromising IOT devices and using them as proxies to test stolen credentials against web-based applications.