Sony Pixel Power calrec Sony

Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers

01/08/2019

Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers Latest State of The Internet / Security Report Observes 3.5 Billion Malicious Login Attempts Targeting the Financial Services Sector; Illustrates Akamai's Unique Threat Visibility

Cambridge, MA | July 31, 2019

Newly released data from Akamai's 2019 State of the Internet / Security Financial Services Attack Economy Report has found that 50% of all unique organizations impacted by observed phishing domains were from the financial services sector. The data shows that, in addition to unique phishing attempts, adversaries also leveraged credential stuffing attacks to the tune of 3.5 billion attempts during an 18-month period, putting the personal data and banking information of financial services customers at risk.

The report indicates that between December 2, 2018 and May 4, 2019, nearly 200,000 (197,524 to be exact) phishing domains were discovered, and of those domains, 66% targeted consumers directly. When taking the phishing domains targeting consumers only into consideration, 50% of those targeted companies in the financial services industry.

We've seen a steady rise in credential stuffing attacks over the past year, fed in part by a growth in phishing attacks against consumers, said Martin McKeay, Security Researcher at Akamai and Editorial Director of the State of the Internet / Security Report. Criminals supplement existing stolen credential data through phishing, and then one way they make money is by hijacking accounts or reselling the lists they create. We're seeing a whole economy developing to target financial services organizations and their consumers.

Once criminals have succeeded in their schemes, they need to process their ill-gotten data and funds. As Akamais report highlights, one method of dealing with this situation centers on bank drops' - packages of data that can be used to fraudulently open accounts at a given financial institution. Bank drops will typically include a persons stolen identity - often called fullz by criminals online, including name, address, date of birth, Social Security details, drivers license information, and credit score. Secure access to the fraudulent accounts comes via remote desktop servers, which are matched to the geographic location of the bank and the fullz.

Financial institutions continue to investigate the ways in which criminals are opening these drop accounts, and are working diligently to stay ahead of the curve. What most businesses don't realize, however, is that criminals are recycling old attack methods.

Akamai's findings revealed that 94% of observed attacks against the financial services sector came from one of four methods: SQL Injection (SQLi), Local File Inclusion (LFI), Cross-Site Scripting (XSS), and OGNL Java Injection (which accounted for more than 8 million attempts during this reporting period). OGNL Java Injection, made famous due to the Apache Struts vulnerability, continues to be used by attackers years after patches have been issued.

In the financial services industry, criminals have also started launching DDoS attacks as a distraction to conduct credential stuffing attacks or to exploit a web-based vulnerability. Over the course of 18 months, Akamai uncovered more than 800 DDoS attacks against the financial services industry alone.

Attackers are targeting financial services organizations at their weak points: the consumer, web applications and availability, because that's what works, said McKeay. Businesses are becoming better at detecting and defending against these attacks, but point defenses are bound to fail. It requires being able to detect, analyze, and defend against an intelligent criminal who's using multiple different types of tools for a business to protect its customers. For more than twenty years, Akamai has been leveraging its unique visibility into the full spectrum of attacks to help protect customers from these types of ever-evolving nefarious activities.

The criminal economy thrives, in part, because they target the financial services industry. By targeting banks for example, criminals attempt to steal sensitive data, and then turn around and use that same data to open fake accounts and lines of credit. Its a continuous cycle of crime. There is a deep level of irony in the fact that criminals are targeting the very industry they need to survive. While financial institutions are becoming better at detecting these attacks, adversaries continue to find success with old tricks, and that's a problem.

The Akamai 2019 State of the Internet / Security Report is available for download here. For additional information where the security community can access, engage with, and learn from Akamai's threat researchers and the insight that the Akamai Intelligent Edge Platform affords into the evolving threat landscape, visit Akamai's Threat Research Hub.

About Akamai Akamai secures and delivers digital experiences for the world's largest companies. Akamai's intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help them realize competitive advantage through agile solutions that extend the power of their multi-cloud architectures. Akamai keeps decisions, apps and experiences closer to users than anyone - and attacks and threats far away. Akamai's portfolio of edge security, web and mobile performance, enterprise access and video delivery solutions is supported by unmatched customer service, analytics and 24/7/365 monitoring. To learn why the world's top brands trust Akamai, visit www.akamai.com, blogs.akamai.com, or @Akamai on Twitter. You can find our global co
LINK: https://www.akamai.com/uk/en/about/news/press/2019-press/state-of-the-...
See more stories from akami

Most recent headlines

05/01/2027

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be demoed at CES 2026

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...

07/10/2026

Dalet Flex LTS Delivers Smarter Media Operations from Ingest to Distribution

Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...

06/09/2026

Dolby and MagentaTV Bring Fans Closer to the FIFA World Cup 2026 in Germany with Dolby Vision and Dolby Atmos

June 9 2026, 23:00 (PDT) Dolby and MagentaTV Bring Fans Closer to the FIFA Worl...

21/08/2026

Indiana Pacers Selects DAZN As Exclusive Streaming Partner

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Chyron To Showcase Newsroom Advancements At IBC 2026

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Broadpeak to Launch Multiview as a Service at IBC2026

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

University of Maryland Deploys Sony FX30 Cameras

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Study: FAST Sports Programming Surges

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Spectrum SportsNet LA Launches in Former Cox Markets

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

ESPN Airs Its Most-Watched WNBA Game

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Wisycom Wireless and DPA Microphones Support Pope Leo XIV...

When hundreds of thousands of people gather to hear a single voice, there is no room for compromise. Every word must be delivered clearly, every wireless transm...

21/08/2026

Telestream and ScorePlay Turn Live Sports into Immediate...

Telestream, a global leader in media workflow technologies, today announced a strategic partnership with ScorePlay, the AI-powered media infrastructure that spo...

21/08/2026

NUGEN Audio Launches New Post and Producer Subscription P...

NUGEN Audio announces the launch of its new Post Plan and Producer Plan, two flexible subscription offerings designed to give audio professionals short term acc...

21/08/2026

Join the Screen Currency 2026 Ask Me Anything (AMA) Online

Join the Screen Currency 2026 Ask Me Anything (AMA) Online 20 August 2026 (L-R): Adrian Coates, Grainne Brunsdon, Deirdre Brennan, Rachael Perkins Got questio...

20/08/2026

NEP's Summer of Soccer Didn't End at World Cup: 1,100+ Domestic Productions Follow the Final

From host-broadcaster and rightsholder support in June and July to MLS, NWSL, US...

20/08/2026

SVG GameDay, Ep. 27: San Jose Sharks' Emily Garner - Production Tales From the Shark Tank

In-venue and creative video staffers at the professional and collegiate level ha...

20/08/2026

IBC 2026: Veritone To Showcase Enterprise AI and Media Supply Chain Automation

At IBC this year, Veritone (14.A56) is bringing two connected themes to the booth: architectural independence in enterprise AI, and the automation of the media ...

20/08/2026

Telestream and ScorePlay Partner to Connect Live Sports Ingest with Media Management

Telestream and ScorePlay have announced a partnership combining Telestream's...

20/08/2026

Grand Slam of Curling and Rock League Sign Multi-Year Deal with ESPN

The Grand Slam of Curling and Rock League have announced a three-year agreement with ESPN, bringing more than 300 hours of live curling coverage to U.S. audienc...

20/08/2026

Nielsen Announces Measurement Enhancements Ahead of Fall TV Season

Nielsen has announced a series of enhancements to its Big Data + Panel currency measurement methodology, taking effect August 31. The updates were developed in ...

20/08/2026

ORF Deploys Net Insight Nimbra Platform for Nationwide IP Contribution Network

Net Insight has been selected by service provider Big Blue Marble (formerly ORS Group) to provide its Nimbra platform as the core media transport solution for a...

20/08/2026

2026 US Open Launches Fan Activations Across New York City

The 2026 US Open will bring a series of free fan activations across New York City ahead of and during the tournament, which runs August 23-September 13. We...

20/08/2026

Bridge Technologies Adds TS Playout to VB330 and VB220 Monitoring Probes

Bridge Technologies will announce a transport stream (TS) playout feature for its VB330 and VB220 compressed monitoring probes at IBC2026 (Booth 1.A71). The fe...

20/08/2026

IBC 2026: ENCO To Showcase AI and Automation Solutions

ENCO will demonstrate solutions across captioning, translation, AI production tools, automation, and virtual production at IBC2026 (Stand 7.A34, Amsterdam RAI, ...

20/08/2026

IBC 2026: MultiDyne MRMC To Exhibit for First Time as Part of MultiDyne Organization

MultiDyne Video and Fiber Optic Systems will demonstrate camera robotics and mot...

20/08/2026

IBC 2026: Chyron Showcases Newsroom Workflow Solutions

Chyron will demonstrate news workflow solutions at IBC2026 (Stand 7.A23), marking the company's 60th anniversary. Highlights include updates to PRIME HTML, ...

20/08/2026

Spectrum SportsNet LA Now Available to Customers in Former Cox Markets

Spectrum SportsNet LA, the exclusive television home of the Los Angeles Dodgers, is now available to Spectrum customers in former Cox markets following the clos...

20/08/2026

IBC 2026: swXtch.io Launches Expanded SRT Distribution and Native Multicast Services

swXtch.io will unveil expanded Global SRT Distribution and native multicast tran...

20/08/2026

Transformation Church Deploys Riedel Artist Intercom System

Riedel Communications has announced that Transformation Church in the United States has deployed a communications system built around the Artist intercom ecosys...

20/08/2026

Apple at 50: Author and CBS Sunday Morning Correspondent David Pogue on How a Tech Giant Became a Media Powerhouse

The bestselling author and longtime Apple observer explores how product launches...

20/08/2026

Orlando Magic's David Storm Reflects on the Franchises First Year With Its New ST 2110 Control Room and Massive Center-Hung Videoboard

The Orlando Magic entered last season with a dramatically upgraded in-venue prod...

20/08/2026

Indiana Pacers Name DAZN Exclusive Streaming Home Beginning 2026-27 Season

Pacers Sports and Entertainment has announced a partnership with DAZN, making it the exclusive streaming home of Indiana Pacers basketball. A team-branded strea...

20/08/2026

Ratings Roundup: Scotty Scheffler Win Tops the Week, ESPN Posts Most-Watched WNBA Game Ever on Cable

Ratings Roundup is a rundown of recent ratings news and is derived from press re...

20/08/2026

NHL Announces Germany Expansion with FC Bayern Partnership and 2027 Global Series Games in Munich and Cologne

The NHL has announced two major developments tied to its Germany growth strategy...

20/08/2026

SoundBridges TURN server tutorial

Set up your own private remote collaboration infrastructure SoundBridge have recently put together a tutorial video that provides users with a step-by-step ...

20/08/2026

Neyrinck revive Avid D-Control surfaces

New V-Control Pro features restore basic functionality Neyrinck's V-Control software has long been keeping older Avid control surfaces compatible with n...

20/08/2026

ROSE AYLING-ELLIS BEGINS FILMING SERIES TWO OF ITVS BAFTA-WINNING THRILLER CODE OF SILENCE

TV, BritBox and Mammoth Screen have announced that filming is now underway on th...

20/08/2026

Nielsen Incorporates New Enhancements To Improve Its Data Measurement Leading Into The New Fall TV Season

New York August 19, 2026 Nielsen today shared a number of key enhancements t...

20/08/2026

FAST Sports Programming Surges at More Than Twice the Rate of Sports Channel Growth

New Gracenote Data Hub analysis finds sports program titles up 31.2% and individ...

20/08/2026

Charter Completes $34.5 Billion Cox Acquisition

Share Copy link Facebook X Linkedin Bluesky Email...

20/08/2026

SubtitleNEXT makes a significant leap in localisation eff...

At IBC, Profuz Digital will showcase at stand 8.A88 the SubtitleNEXT platform delivering innovative AI transcription integrations and stunning new features boos...

20/08/2026

Transformation Church Elevates Production Communications...

Riedel Communications today announced that Transformation Church, one of the fastest-growing and most influential digital ministries in the United States, has d...

20/08/2026

QuickLink Showcases New 4K Capabilities Across StudioEdge and StudioCall at IBC 2026

QuickLink Showcases New 4K Capabilities Across StudioEdge and StudioCall at IBC ...

20/08/2026

The Boys Season Five Graded with DaVinci Resolve Studio

The Boys Season Five Graded with DaVinci Resolve Studio Brie Clayton August 20, 2026 0 Comments Colorist Siggy Ferstl uses Depth Map to bring a three ...

20/08/2026

Adobe Firefly expands its creative AI studio: generate music, speech, and sound effects in one place

Adobe Firefly expands its creative AI studio: generate music, speech, and sound ...

20/08/2026

Broadpeak launches Multiview as a Service to accelerate m...

Multiview available via SaaS for streaming platforms and operators through broadpeak.io, with live demonstrations at IBC2026 Broadpeak , a leader in streaming ...

20/08/2026

Techex Appoints Stuart Almond as Chief Revenue Officer

Techex, a leading provider of live broadcast infrastructure solutions, has appointed Stuart Almond as Chief Revenue Officer, further strengthening its executive...

20/08/2026

MediaCity Studios upgrades with Avid

Avid today announced that MediaCity Studios has upgraded its production infrastructure with an enhanced end-to-end Avid production ecosystem, including the dep...

20/08/2026

MS Now to Launch $7.99 DTC Service

Share Copy link Facebook X Linkedin Bluesky Email...

20/08/2026

Nielsen Details Improvements to Audience Measurement Capabilities

Share Copy link Facebook X Linkedin Bluesky Email...