
Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers Latest State of The Internet / Security Report Observes 3.5 Billion Malicious Login Attempts Targeting the Financial Services Sector; Illustrates Akamai's Unique Threat Visibility
Cambridge, MA | July 31, 2019
Newly released data from Akamai's 2019 State of the Internet / Security Financial Services Attack Economy Report has found that 50% of all unique organizations impacted by observed phishing domains were from the financial services sector. The data shows that, in addition to unique phishing attempts, adversaries also leveraged credential stuffing attacks to the tune of 3.5 billion attempts during an 18-month period, putting the personal data and banking information of financial services customers at risk.
The report indicates that between December 2, 2018 and May 4, 2019, nearly 200,000 (197,524 to be exact) phishing domains were discovered, and of those domains, 66% targeted consumers directly. When taking the phishing domains targeting consumers only into consideration, 50% of those targeted companies in the financial services industry.
We've seen a steady rise in credential stuffing attacks over the past year, fed in part by a growth in phishing attacks against consumers, said Martin McKeay, Security Researcher at Akamai and Editorial Director of the State of the Internet / Security Report. Criminals supplement existing stolen credential data through phishing, and then one way they make money is by hijacking accounts or reselling the lists they create. We're seeing a whole economy developing to target financial services organizations and their consumers.
Once criminals have succeeded in their schemes, they need to process their ill-gotten data and funds. As Akamais report highlights, one method of dealing with this situation centers on bank drops' - packages of data that can be used to fraudulently open accounts at a given financial institution. Bank drops will typically include a persons stolen identity - often called fullz by criminals online, including name, address, date of birth, Social Security details, drivers license information, and credit score. Secure access to the fraudulent accounts comes via remote desktop servers, which are matched to the geographic location of the bank and the fullz.
Financial institutions continue to investigate the ways in which criminals are opening these drop accounts, and are working diligently to stay ahead of the curve. What most businesses don't realize, however, is that criminals are recycling old attack methods.
Akamai's findings revealed that 94% of observed attacks against the financial services sector came from one of four methods: SQL Injection (SQLi), Local File Inclusion (LFI), Cross-Site Scripting (XSS), and OGNL Java Injection (which accounted for more than 8 million attempts during this reporting period). OGNL Java Injection, made famous due to the Apache Struts vulnerability, continues to be used by attackers years after patches have been issued.
In the financial services industry, criminals have also started launching DDoS attacks as a distraction to conduct credential stuffing attacks or to exploit a web-based vulnerability. Over the course of 18 months, Akamai uncovered more than 800 DDoS attacks against the financial services industry alone.
Attackers are targeting financial services organizations at their weak points: the consumer, web applications and availability, because that's what works, said McKeay. Businesses are becoming better at detecting and defending against these attacks, but point defenses are bound to fail. It requires being able to detect, analyze, and defend against an intelligent criminal who's using multiple different types of tools for a business to protect its customers. For more than twenty years, Akamai has been leveraging its unique visibility into the full spectrum of attacks to help protect customers from these types of ever-evolving nefarious activities.
The criminal economy thrives, in part, because they target the financial services industry. By targeting banks for example, criminals attempt to steal sensitive data, and then turn around and use that same data to open fake accounts and lines of credit. Its a continuous cycle of crime. There is a deep level of irony in the fact that criminals are targeting the very industry they need to survive. While financial institutions are becoming better at detecting these attacks, adversaries continue to find success with old tricks, and that's a problem.
The Akamai 2019 State of the Internet / Security Report is available for download here. For additional information where the security community can access, engage with, and learn from Akamai's threat researchers and the insight that the Akamai Intelligent Edge Platform affords into the evolving threat landscape, visit Akamai's Threat Research Hub.
About Akamai Akamai secures and delivers digital experiences for the world's largest companies. Akamai's intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help them realize competitive advantage through agile solutions that extend the power of their multi-cloud architectures. Akamai keeps decisions, apps and experiences closer to users than anyone - and attacks and threats far away. Akamai's portfolio of edge security, web and mobile performance, enterprise access and video delivery solutions is supported by unmatched customer service, analytics and 24/7/365 monitoring. To learn why the world's top brands trust Akamai, visit www.akamai.com, blogs.akamai.com, or @Akamai on Twitter. You can find our global co
Most recent headlines
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
07/10/2026
Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...
08/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/09/2026
Mo-Sys, the world-leading developer of virtual production, camera robotics and image tracking technology, has completed a business restructuring, which has incl...
08/09/2026
New York, September 8, 2026 The TSAmediaHUB audiovisual contribution and distribution infrastructure developed by Telef nica's Audiovisual Services area re...
08/09/2026
Expanded Riyadh operation brings Asharq and Thmanyah services together on a resilient on-premises Pebble platform.
Pebble, the leading automation, content mana...
08/09/2026
Techex, a pioneering leader in live video workflows, will showcase its broadest software feature set to date at IBC 2026 (Stand 2.B45), extending its lead in so...
08/09/2026
Visitors to Grass Valley's booth at IBC2026 will be introduced to new Framelight X capabilities that connect content acquisition, management, editing and pu...
08/09/2026
BCNEXXT will showcase the latest evolution of Vipe at IBC2026 (Stand 2.B09), introducing a series of innovations designed to deliver higher-quality audience exp...
08/09/2026
Bitmovin, a provider of video streaming solutions, has partnered with Ad Insertion Platform (AIP), a leading innovator in advanced ad insertion technologies, to...
08/09/2026
Brainstorm, a leading manufacturer of real-time graphics and augmented and virtual production, is announcing a major package of enhancements to its Suite 7 soft...
08/09/2026
Big Blue Marble is supporting TDF, French infrastructure and network operator, broadcasting Digital Terrestrial Television (DTT) and radio services, as a techno...
08/09/2026
Agents work inside a single production environment, from incoming wire copy to a live studio show...
08/09/2026
Building on their strategic partnership, Ceeblue and Layercake make the unthinkable possible: scalable sub-second streaming over standard DRM, SSAI, and CDN wor...
08/09/2026
Brainstorm, a leading manufacturer of real-time graphics, augmented and virtual production, is completing the environment for fast-paced broadcast production wi...
08/09/2026
A SaaS portfolio built to work together, helping operators grow audiences, monetise smarter and run leaner, on their own terms
At IBC 2026 (stand 1.B49) Synam...
08/09/2026
Accedo, global provider of video streaming software and services, has been selected by PlayOn Sports, a national leader in high school sports technology, to exp...
08/09/2026
LiveU, the leader in live IP-video solutions, is enabling The Associated Press to take global newsgathering to the next stage with intelligent connectivity and ...
08/09/2026
Mediagenix, a global leader in smart content solutions to profitably connect the right content to the right audience, today announced the latest evolution of it...
08/09/2026
Compact, power-efficient X Platform performance brings broadcast-grade reliability and ultra-low latency to space-constrained remote production (REMI) workflows...
08/09/2026
Zixi, the leader in live video delivery and workflow orchestration, and Kiloview, a leading provider of professional IP video encoding and decoding solutions, t...
08/09/2026
Collaboration gives content owners scalable CDN capacity and broadcasters enhanced flexibility, including for C-band transition planning
Quortex today announce...
08/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
08/09/2026
BERLIN, September 8, 2026 - J nger Audio will introduce a major expansion of its flexAI audio processing platform at IBC 2026. The flexAI system adds autonomous...
08/09/2026
New Vendor-Agnostic Broadband Intelligence Fabric Reduces Operational Complexity and Improves Service Quality for Broadband Service Providers SAN JOSE, Calif. -...
08/09/2026
Arvato Systems Brings TI Expertise to the Stage
Panels, workshops, and real-world examples at the TI-SUMMIT 2026
Arvato Systems, a partner of the TI-SUMMIT 2...
08/09/2026
On October 1, Apple Arcade is rolling out a lineup of fun new games for players ...
07/09/2026
By Ramona Flume and Lucy Spicer
There's a particular kind of magic that hap...
07/09/2026
Two new full-range, flat-response cabinets introduced
HeadRush have recently introduced a pair of new full-range, flat-response cabinets designed for player...
07/09/2026
Answering questions about AI in game audio
GameSoundCon, the largest professional conference for video game music and sound design, have announced that they...
07/09/2026
New directional headset mic on show at IBC
Just ahead of this week's IBC show, DPA have announced the launch of a new directional headset that's bee...
07/09/2026
We are not building systems to replace human decision-making; we are building systems that execute our decisions at machine speed. The media companies that win ...
07/09/2026
Blackmagic Design Announces New Lower Price for Blackmagic PYXIS 6K and Blackmag...
07/09/2026
GB Labs to Unveil Core.ONE at IBC2026, an Intelligent Storage Platform for Media...
07/09/2026
Monday 7 September 2026
Freddie Meredith joins cast of SNL UK ahead of start of Season 2
Freddie Meredith Images
ZIP (3MB)
Saturday Night Live UK announces ...
07/09/2026
Monday 7 September 2026
Sky and NFTS team up to launch new routes into screen careers
Sky has today announced a new apprenticeship programme, with application...
07/09/2026
Monday 7 September 2026
Sky Sports announces most comprehensive NFL coverage to...
07/09/2026
Dolby, MainConcept, Techex and J nger Audio will showcase the industry's first demonstration of Serial Audio Definition Model (S-ADM) in a cloud-based produ...
07/09/2026
dB Broadcast will showcase APIS Hive, its software platform for designing, deploying and managing modern broadcast infrastructures, at IBC 2026.
Developed from...
07/09/2026
552,000 streams on RT Player
The historic fight, which saw Katie Taylor become...
06/09/2026
Recreates Rolands TB-303 & MC-202
BS-203 MacroAcidizer is the first virtual instrument from Born Second, and it offers a recreation of two Roland classics -...
06/09/2026
London, UK September 2026 PlayBox Technology is inviting broadcasters, OTT and FAST operators, content owners and media organisations worldwide to become De...
06/09/2026
June 9 2026, 23:00 (PDT) Dolby and MagentaTV Bring Fans Closer to the FIFA Worl...
05/09/2026
MK2 & Bass system control app improved
HEDD Audio have just launched a new and improved version of the control software that pairs with their MK2 and Bass m...
05/09/2026
The National Film and Video Foundation (NFVF), an agency of the Department of Sp...
05/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
05/09/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
05/09/2026
InSync Technology, the leading provider of premium video conversion solutions, will showcase a new generation of products at IBC 2026, designed to help broadcas...
05/09/2026
GlobalM successfully supported quattro media GmbH and World Rowing, the world governing body of the Olympic sport of Rowing, with the international distribution...
05/09/2026
LA JOLLA, CA-In recognition of his exceptional work to understand the chemistry of carbohydrates and the role they play in health and disease, Scripps Family Ch...