Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers

01/08/2019

Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers Latest State of The Internet / Security Report Observes 3.5 Billion Malicious Login Attempts Targeting the Financial Services Sector; Illustrates Akamai's Unique Threat Visibility

Cambridge, MA | July 31, 2019

Newly released data from Akamai's 2019 State of the Internet / Security Financial Services Attack Economy Report has found that 50% of all unique organizations impacted by observed phishing domains were from the financial services sector. The data shows that, in addition to unique phishing attempts, adversaries also leveraged credential stuffing attacks to the tune of 3.5 billion attempts during an 18-month period, putting the personal data and banking information of financial services customers at risk.

The report indicates that between December 2, 2018 and May 4, 2019, nearly 200,000 (197,524 to be exact) phishing domains were discovered, and of those domains, 66% targeted consumers directly. When taking the phishing domains targeting consumers only into consideration, 50% of those targeted companies in the financial services industry.

We've seen a steady rise in credential stuffing attacks over the past year, fed in part by a growth in phishing attacks against consumers, said Martin McKeay, Security Researcher at Akamai and Editorial Director of the State of the Internet / Security Report. Criminals supplement existing stolen credential data through phishing, and then one way they make money is by hijacking accounts or reselling the lists they create. We're seeing a whole economy developing to target financial services organizations and their consumers.

Once criminals have succeeded in their schemes, they need to process their ill-gotten data and funds. As Akamais report highlights, one method of dealing with this situation centers on bank drops' - packages of data that can be used to fraudulently open accounts at a given financial institution. Bank drops will typically include a persons stolen identity - often called fullz by criminals online, including name, address, date of birth, Social Security details, drivers license information, and credit score. Secure access to the fraudulent accounts comes via remote desktop servers, which are matched to the geographic location of the bank and the fullz.

Financial institutions continue to investigate the ways in which criminals are opening these drop accounts, and are working diligently to stay ahead of the curve. What most businesses don't realize, however, is that criminals are recycling old attack methods.

Akamai's findings revealed that 94% of observed attacks against the financial services sector came from one of four methods: SQL Injection (SQLi), Local File Inclusion (LFI), Cross-Site Scripting (XSS), and OGNL Java Injection (which accounted for more than 8 million attempts during this reporting period). OGNL Java Injection, made famous due to the Apache Struts vulnerability, continues to be used by attackers years after patches have been issued.

In the financial services industry, criminals have also started launching DDoS attacks as a distraction to conduct credential stuffing attacks or to exploit a web-based vulnerability. Over the course of 18 months, Akamai uncovered more than 800 DDoS attacks against the financial services industry alone.

Attackers are targeting financial services organizations at their weak points: the consumer, web applications and availability, because that's what works, said McKeay. Businesses are becoming better at detecting and defending against these attacks, but point defenses are bound to fail. It requires being able to detect, analyze, and defend against an intelligent criminal who's using multiple different types of tools for a business to protect its customers. For more than twenty years, Akamai has been leveraging its unique visibility into the full spectrum of attacks to help protect customers from these types of ever-evolving nefarious activities.

The criminal economy thrives, in part, because they target the financial services industry. By targeting banks for example, criminals attempt to steal sensitive data, and then turn around and use that same data to open fake accounts and lines of credit. Its a continuous cycle of crime. There is a deep level of irony in the fact that criminals are targeting the very industry they need to survive. While financial institutions are becoming better at detecting these attacks, adversaries continue to find success with old tricks, and that's a problem.

The Akamai 2019 State of the Internet / Security Report is available for download here. For additional information where the security community can access, engage with, and learn from Akamai's threat researchers and the insight that the Akamai Intelligent Edge Platform affords into the evolving threat landscape, visit Akamai's Threat Research Hub.

About Akamai Akamai secures and delivers digital experiences for the world's largest companies. Akamai's intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help them realize competitive advantage through agile solutions that extend the power of their multi-cloud architectures. Akamai keeps decisions, apps and experiences closer to users than anyone - and attacks and threats far away. Akamai's portfolio of edge security, web and mobile performance, enterprise access and video delivery solutions is supported by unmatched customer service, analytics and 24/7/365 monitoring. To learn why the world's top brands trust Akamai, visit www.akamai.com, blogs.akamai.com, or @Akamai on Twitter. You can find our global co

LINK:	https://www.akamai.com/uk/en/about/news/press/2019-press/state-of-the-...
	See more stories from akami

Most recent headlines

05/01/2027

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be demoed at CES 2026

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...

01/06/2026

Dolby Sets the New Standard for Premium Entertainment at CES 2026

January 6 2026, 05:30 (PST) Dolby Sets the New Standard for Premium Entertainment at CES 2026 Throughout the week, Dolby brings to life the latest innovatio...

02/05/2026

Dalet Flex LTS Delivers Smarter Search, Faster Editing, and an AI-Ready Foundation for Modern Media

Dalet, a leading technology and service provider for media-rich organizations, t...

01/05/2026

NBCUniversal's Peacock to Be First Streamer to Integrate Dolby's Full Suite of Premium Picture and Sound Innovations

January 5 2026, 18:30 (PST) NBCUniversal's Peacock to Be First Streamer to ...

01/04/2026

DOLBY AND DOUYIN EMPOWER THE NEXT GENERATON OF CREATORS WITH DOLBY VISION

January 4 2026, 18:00 (PST) DOLBY AND DOUYIN EMPOWER THE NEXT GENERATON OF CREATORS WITH DOLBY VISION Douyin Users Can Now Create And Share Videos With Stun...

02/03/2026

NBC Sports Selected Imaginary Forces to Create Cinematic Main Title Sequence for Primetime In Milan

NBC Sports selected Imaginary Forces to create the main title sequence for the M...

02/03/2026

NFL Launches Draft-Inspired Innovation Challenge to Advance Future of Fan and Event Technology

The NFL announces the launch of the NFL Draft Innovation Challenge, a new crowds...

02/03/2026

DataMiner SatOps Named Finalist for 2026 Teleport Technology of the Year

The World Teleport Association (WTA) has named Skyline Communications' DataMiner SatOps solution as a finalist for the 2026 Teleport Technology of the Year ...

02/03/2026

Ventum Tech Partners with Pixotope to Expand Virtual Production Capabilities Across the GCC

Ventum Tech announces a strategic partnership with Pixotope, a real-time graphic...

02/03/2026

Victory+ Launches NWSL Content Hub, Taps Top Creators to Redefine How Fans Connect with League

Victory , a free, ad-supported sports streaming service, announces the launch of...

02/03/2026

Global powerhouse Delta Goodrem to represent Australia at this year's Eurovision Song Contest in Vienna, Austria

Global powerhouse Delta Goodrem to represent Australia at this year's Eurovi...

02/03/2026

SBS brings together prominent voices to discuss rising social division and seek solutions for a more inclusive country

SBS brings together prominent voices to discuss rising social division and seek ...

02/03/2026

NITV Unveils Wednesday Night Sport Night

NITV Unveils Wednesday Night Sport Night Media releases A Midweek Hub for Blak Sport Flagship NRL program Over The Black Dot moves to Wednesdays at 9:30pm ...

02/03/2026

Rohde & Schwarz demonstrates FR1-FR3 carrier aggregation, advancing 6G readiness

Rohde & Schwarz demonstrates FR1-FR3 carrier aggregation, advancing 6G readiness Rohde & Schwarz and Qualcomm Technologies, Inc. have reached another pivotal ...

02/03/2026

L3Harris Appoints Ken Sharp Senior Vice President and Chief Financial Officer, Ken Bedingfield President of Missile Solutions

MELBOURNE, Fla., March 2, 2026 - L3Harris Technologies (NYSE: LHX) today announc...

02/03/2026

Nielsen reveals New Zealand's top ad spenders and categories for 2025

Harvey Norman tops New Zealand's biggest ad spenders as retail leads and telcos and beverages sure Auckland March 3, 2026 - Nielsen's New Zealand'...

02/03/2026

aconnic and Arqit join forces to present the first quantum-safe industrial OT security gateway firewall at Mobile World Congress 2026

aconnic AG (ISIN: DE000A0LBKW6), Munich, and Arqit Quantum Inc. (Nasdaq: ARQQ, A...

02/03/2026

Advanced Systems Group Promotes Jody Boatwright to Chief...

Advanced Systems Group, LLC (ASG), a technology and services provider for media creatives and content owners, has appointed Jody Boatwright as Chief Strategy Of...

02/03/2026

Lightware TPN ecosystem powers smarter networks and strea...

Lightware, an industry leader in signal management, is reinforcing its commitment to simplifying complex AV environments with the continued evolution of its TPN...

02/03/2026

ZEISS Cinema Hosts First US Aatma Lens Demo Event in LA

ZEISS Cinema opens its doors to an exclusive screening, filmmakers Q&A and hands-on showcase of the new ZEISS Aatma lens family on Tuesday, March 10, 6:00-9:00 ...

02/03/2026

DoPchoice Introduces SNAPBAG Round for the New Astera Qui...

To expand the creative potential of the compact Astera QuikBeam, DoPchoice introduces the SNAPBAG Round. The new light-shaping accessory transforms the powerfu...

02/03/2026

Douglas Dubler Master of Light - Five Decades Shooting w...

Douglas Dubler On a rooftop in New York City, veteran photographer Douglas Dubler watched the sun's angle shift across the urban landscape, his internal cl...

02/03/2026

ZEISS Expands Otus ML Lineup with the New 1435

ZEISS is expanding its Otus ML lens family with the introduction of the new ZEISS Otus ML 1.4/35. This manual-focus lens is designed for photographers who live ...

02/03/2026

Matthews Intros White FlexiMount and Phone Mount Kit by D...

Matthews Studio Equipment now offers the new Dinkum Systems White FlexiMount and Phone Mount Kit, a compact, highly adaptable setup for mobile content creation...

02/03/2026

SES and Africa Mobile Network Reach Milestone: Connecting 5.8 Million in DRC, Expanding Rural Coverage

Luxembourg, February 26, 2026 - SES and Africa Mobile Network (AMN) have expande...

02/03/2026

Ausfilm and Screen Australia launch joint UK market initiative

02 03 2026 - Media release Ausfilm and Screen Australia launch joint UK market initiative Ausfilm and Screen Australia have announced Partner with Australia (...

02/03/2026

Saturday Night Live UK announces writing team

Monday 2 March 2026 Saturday Night Live UK announces writing team L-R: Jonno Johnson; Charlie Skelton; Celya AB; Omar Badawy; Gr inne Maguire; Laura Claxton; ...

02/03/2026

Netflix Unveils the Trailer for '53 Sundays', the New Film by Cesc Gay

Back to All News Netflix Unveils the Trailer for 53 Sundays, the New Film by Cesc Gay Entertainment 02 March 2026 GlobalSpain Link copied to clipboard Dis...

02/03/2026

Fox Corporation President and Chief Operating Officer John Nallen to Participate in Upcoming Deutsche Bank's 34th Annual Media, Internet & Telecom Conference 2026

28/02/2026

FOX Sports Waves Green Flag on 2026 IndyCar Season With Driver's Eye, Heads Up Display, Live Drones

With two features seen in Formula 1 coverage, the broadcaster aims to bring view...

28/02/2026

Secretary of War Pete Hegseth Visits L3Harris Solid Rocket Motor Site

Secretary of War Pete Hegseth addresses a crowd of approximately 1,500 L3Harris employees in Camden, Arkansas, as part of his Arsenal of Freedom tour....