Account takeover (ATO) is a type of cybercrime in which an attacker gains unauthorized access to a victim's online account. This can be done through various means, such as stealing login credentials, obtaining access to a victim's mobile phone to bypass two-factor authentication, or using social engineering tactics to trick the victim into giving away their account information.