Fraudsters stopped storming the gates and started forging credentials to walk through the front door. Yet, many defenders are still manning the walls.