Security attacks on password managers have soared

• Picus Security says the number of attacks against password managers skyrocketed in 2024
• The malware is growing more sophisticated
• Users should deploy MFA with password managers, research suggests

Cybercriminals are increasingly targeting password managers in an attempt to break into various important digital accounts.

Picus Security detailed its findings in the newly-released Red Report 2025, based on an in-depth analysis of more than a million malware variants collected last year, finding a quarter of all malware (25%) targeted credentials in password stores. This, the researchers claim, represents a three-fold increase compared to the year before.