Compromised credentials and access points
Compromised email accounts
Remote access credentials
VPN access points