Credential compromise emerged the main target for phishing campaigns in 2018 – rather than infecting victims’ devices with malware.
Source: Threadpost