New research reveals account takeover fraud