Stealing administrative credentials to carry out months-long spy campaigns is a top threat.
Source: Threadpost