I expect that to change over time. I personally expect man-in-the-browser attacks to start targeting SaaS application data. I suspect a secondary reason is tha

I expect that to change over time. I personally expect man-in-the-browser attacks to start targeting SaaS application data. I suspect a secondary reason is that the way windows credentials and file shares are set up, you can really build one-size-fits-all malware that goes after creds and hashes in a fairly generic way.