
Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers Latest State of The Internet / Security Report Observes 3.5 Billion Malicious Login Attempts Targeting the Financial Services Sector; Illustrates Akamai's Unique Threat Visibility
Cambridge, MA | July 31, 2019
Newly released data from Akamai's 2019 State of the Internet / Security Financial Services Attack Economy Report has found that 50% of all unique organizations impacted by observed phishing domains were from the financial services sector. The data shows that, in addition to unique phishing attempts, adversaries also leveraged credential stuffing attacks to the tune of 3.5 billion attempts during an 18-month period, putting the personal data and banking information of financial services customers at risk.
The report indicates that between December 2, 2018 and May 4, 2019, nearly 200,000 (197,524 to be exact) phishing domains were discovered, and of those domains, 66% targeted consumers directly. When taking the phishing domains targeting consumers only into consideration, 50% of those targeted companies in the financial services industry.
We've seen a steady rise in credential stuffing attacks over the past year, fed in part by a growth in phishing attacks against consumers, said Martin McKeay, Security Researcher at Akamai and Editorial Director of the State of the Internet / Security Report. Criminals supplement existing stolen credential data through phishing, and then one way they make money is by hijacking accounts or reselling the lists they create. We're seeing a whole economy developing to target financial services organizations and their consumers.
Once criminals have succeeded in their schemes, they need to process their ill-gotten data and funds. As Akamais report highlights, one method of dealing with this situation centers on bank drops' - packages of data that can be used to fraudulently open accounts at a given financial institution. Bank drops will typically include a persons stolen identity - often called fullz by criminals online, including name, address, date of birth, Social Security details, drivers license information, and credit score. Secure access to the fraudulent accounts comes via remote desktop servers, which are matched to the geographic location of the bank and the fullz.
Financial institutions continue to investigate the ways in which criminals are opening these drop accounts, and are working diligently to stay ahead of the curve. What most businesses don't realize, however, is that criminals are recycling old attack methods.
Akamai's findings revealed that 94% of observed attacks against the financial services sector came from one of four methods: SQL Injection (SQLi), Local File Inclusion (LFI), Cross-Site Scripting (XSS), and OGNL Java Injection (which accounted for more than 8 million attempts during this reporting period). OGNL Java Injection, made famous due to the Apache Struts vulnerability, continues to be used by attackers years after patches have been issued.
In the financial services industry, criminals have also started launching DDoS attacks as a distraction to conduct credential stuffing attacks or to exploit a web-based vulnerability. Over the course of 18 months, Akamai uncovered more than 800 DDoS attacks against the financial services industry alone.
Attackers are targeting financial services organizations at their weak points: the consumer, web applications and availability, because that's what works, said McKeay. Businesses are becoming better at detecting and defending against these attacks, but point defenses are bound to fail. It requires being able to detect, analyze, and defend against an intelligent criminal who's using multiple different types of tools for a business to protect its customers. For more than twenty years, Akamai has been leveraging its unique visibility into the full spectrum of attacks to help protect customers from these types of ever-evolving nefarious activities.
The criminal economy thrives, in part, because they target the financial services industry. By targeting banks for example, criminals attempt to steal sensitive data, and then turn around and use that same data to open fake accounts and lines of credit. Its a continuous cycle of crime. There is a deep level of irony in the fact that criminals are targeting the very industry they need to survive. While financial institutions are becoming better at detecting these attacks, adversaries continue to find success with old tricks, and that's a problem.
The Akamai 2019 State of the Internet / Security Report is available for download here. For additional information where the security community can access, engage with, and learn from Akamai's threat researchers and the insight that the Akamai Intelligent Edge Platform affords into the evolving threat landscape, visit Akamai's Threat Research Hub.
About Akamai Akamai secures and delivers digital experiences for the world's largest companies. Akamai's intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help them realize competitive advantage through agile solutions that extend the power of their multi-cloud architectures. Akamai keeps decisions, apps and experiences closer to users than anyone - and attacks and threats far away. Akamai's portfolio of edge security, web and mobile performance, enterprise access and video delivery solutions is supported by unmatched customer service, analytics and 24/7/365 monitoring. To learn why the world's top brands trust Akamai, visit www.akamai.com, blogs.akamai.com, or @Akamai on Twitter. You can find our global co
Most recent headlines
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
07/10/2026
Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...
06/09/2026
June 9 2026, 23:00 (PDT) Dolby and MagentaTV Bring Fans Closer to the FIFA Worl...
02/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
02/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
02/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
02/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
02/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
02/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
02/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
02/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
02/09/2026
Next-Generation Freeform Control Surfaces Lay the Foundation for AI-Enabled Media Operations
At IBC2026 (Sept. 11 14, RAI Amsterdam, Stand #1.B73), Imagine Com...
02/09/2026
Friedrichstadt-Palast in Berlin, the world's largest theater stage, has modernized its backstage production infrastructure with a comprehensive Riedel solut...
02/09/2026
Women in Media announces that it will host the two-day Reel/Forward in-person conference devoted to navigating today's production scene. Guests can enjoy pa...
02/09/2026
The expanded partnership brings Teradek's Live Production solutions to New Media AV's European dealer and integrator network, opening new opportunities ...
02/09/2026
QuickLink, a leading provider of award-winning video production and remote guest contribution solutions, announces a major expansion to its award winning Studio...
02/09/2026
BCNEXXT, the developers of the advanced playout platform Vipe, today announced that premium entertainment brand Foxtel has selected Vipe to underpin playout for...
02/09/2026
SubtitleNEXT helps HOT Telecom's subtitling team keep a cool head with reliable QC capabilities
Profuz Digital, global developer of digital media and local...
02/09/2026
Case Study: Mission Digital Strengthens Battery Safety with Safe-ion
As productions become increasingly dependent on battery-powered equipment, the safe storag...
02/09/2026
LA JOLLA, CA-Influenza viruses constantly shapeshift to evade recognition by the immune system. This shapeshifting occurs in critical proteins like hemagglutini...
02/09/2026
LA JOLLA, CA-Clinicians often use a medical test called a 12-lead electrocardiogram (ECG) to diagnose heart problems, which uses electrodes placed on the chest ...
02/09/2026
LA JOLLA, CA-Proteins may look like rigid molecular structures, but inside our c...
01/09/2026
Bridge Technologies will announce at IBC2026 (Booth 1.A71) that its VB440 produc...
01/09/2026
DAZN has announced an agreement to acquire EverPass Media, a commercial sports distribution platform serving bars, restaurants, hotels, and other venues in the ...
01/09/2026
The USTA and Kalshi have announced a multi-year partnership making Kalshi the Official Prediction Market Partner of the US Open, beginning with the 2026 US Open...
01/09/2026
MASV will exhibit at IBC2026 (Booth 5.B40, RAI Amsterdam, September 11-14). CTO Majed Alhajry will appear on a panel session, A Tale of Two Feeds: Automation o...
01/09/2026
FingerWorks Telestrators has announced a partnership with Broadcast Rental to ex...
01/09/2026
FOR-A has announced the expansion of viztrick AiDi into two dedicated products: Go Vertical! AiDi and AiDi Sports Hub. Developed by Nippon TV and delivered glob...
01/09/2026
Sony Pictures Television has launched Live TV on PS5, a free ad-supported streaming experience available to PS5 players in the United States. The service is acc...
01/09/2026
Friedrichstadt-Palast in Berlin has installed a Riedel production infrastructure spanning video, intercom, control, and I/O across the venue, implemented in col...
01/09/2026
Arkona technologies GmbH has announced an OEM partnership with BFE Studio und Medien Systeme GmbH to offer arkona-branded control panels for its SDI-IP routing ...
01/09/2026
Cricket Australia has launched Cricket TV, a direct-to-consumer streaming service built on Eluvio's Content Fabric platform. The service is currently in ear...
01/09/2026
Eluvio has announced it was selected to power Pasifika , a new direct-to-consume...
01/09/2026
Layercake, the company behind the intelligent media workflow platform Streamcake, has appointed Jon Marquard as Director and Chairperson. The appointment marks ...
01/09/2026
Gravity Media has announced a multi-year renewal of its agreement with Stawell Gift Event Management to produce the complete broadcast of the Powercor Stawell G...
01/09/2026
Beam Dynamics will exhibit at IBC2026 for the first time (Stand 14.FT29, Hall 14), introducing License Intelligence, a new module for managing software licenses...
01/09/2026
Interra Systems has announced that ZOO Digital has selected BATON for file-based quality control across its media workflows. ZOO Digital delivers localized ente...
01/09/2026
Bridge Technologies has announced the deployment of its VB330 monitoring probe at Sunrise, supporting the Swiss telecommunications provider's IP-based telev...
01/09/2026
Riedel Communications has announced the continued expansion of its managed coach communications partnership with Scottish Rugby Union, now entering its third se...
01/09/2026
Behind The Mic provides a roundup of recent news regarding on-air talent, includ...
01/09/2026
SMPTE today detailed the centerpiece of its IBC2026 program: the SMPTE Roadshow: Future of Media Infrastructure, a full-day workshop on Monday, 14 September, th...
01/09/2026
Inside the Music and Sound of Michael
Sound Particles have announced an upcoming webinar with John Warhurst, the Academy Award- and BAFTA-winning supervisin...
01/09/2026
Piano offers tutorials, lessons & feedback via app
Roland have just launched a new digital piano that integrates with a mobile app in an effort to encourage...
01/09/2026
Update introduces 7.1.4 support via Dante
Trinnov have just announced a software update that will allow Nova units with eight licensed Optimizer channels to...
01/09/2026
SBS secures exclusive rights to FIFA World Cup 2030
1 September, 2026
Media releases
Major sports rights deal ensures all Australians will be able to view...
01/09/2026
SBS announces the launch of outcomes-based measurement across its network
1 September, 2026
Media releases
New offer sees national broadcaster put outcomes...
01/09/2026
Revealed: The Booster Economy' how $140bn+ in everyday inheritances'...
01/09/2026
SBS census explorer to provide new insights into contemporary Australia
1 September, 2026
Media releases
The 2026 Census Explorer will give marketers new i...
01/09/2026
SBS and oOh!media launch exclusive SBS News content partnership across office, a...
01/09/2026
SBS offers marketers greater reach with extension into outdoor, creator economy ...