Researchers with Akamai say that 75 percent of all credential abuse attacks against the financial services industry were targeting APIs.
Source: Threadpost