Researchers measured a threefold increase in credential stealing between 2023 and 2024, with more than 11.3 million such thefts last year.