3l33t haxxors don't need no botnet, they just pinch passwords

Crooks can thrive by 'living off the land' rather than forging elaborate schemes

Half of all breaches Dell's SecureWorks outfit has responded to over the last year have been a result of attackers using legitimate admin tools and stolen credentials."