Sony Pixel Power calrec Sony

Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers

01/08/2019

Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers Latest State of The Internet / Security Report Observes 3.5 Billion Malicious Login Attempts Targeting the Financial Services Sector; Illustrates Akamai's Unique Threat Visibility

Cambridge, MA | July 31, 2019

Newly released data from Akamai's 2019 State of the Internet / Security Financial Services Attack Economy Report has found that 50% of all unique organizations impacted by observed phishing domains were from the financial services sector. The data shows that, in addition to unique phishing attempts, adversaries also leveraged credential stuffing attacks to the tune of 3.5 billion attempts during an 18-month period, putting the personal data and banking information of financial services customers at risk.

The report indicates that between December 2, 2018 and May 4, 2019, nearly 200,000 (197,524 to be exact) phishing domains were discovered, and of those domains, 66% targeted consumers directly. When taking the phishing domains targeting consumers only into consideration, 50% of those targeted companies in the financial services industry.

We've seen a steady rise in credential stuffing attacks over the past year, fed in part by a growth in phishing attacks against consumers, said Martin McKeay, Security Researcher at Akamai and Editorial Director of the State of the Internet / Security Report. Criminals supplement existing stolen credential data through phishing, and then one way they make money is by hijacking accounts or reselling the lists they create. We're seeing a whole economy developing to target financial services organizations and their consumers.

Once criminals have succeeded in their schemes, they need to process their ill-gotten data and funds. As Akamais report highlights, one method of dealing with this situation centers on bank drops' - packages of data that can be used to fraudulently open accounts at a given financial institution. Bank drops will typically include a persons stolen identity - often called fullz by criminals online, including name, address, date of birth, Social Security details, drivers license information, and credit score. Secure access to the fraudulent accounts comes via remote desktop servers, which are matched to the geographic location of the bank and the fullz.

Financial institutions continue to investigate the ways in which criminals are opening these drop accounts, and are working diligently to stay ahead of the curve. What most businesses don't realize, however, is that criminals are recycling old attack methods.

Akamai's findings revealed that 94% of observed attacks against the financial services sector came from one of four methods: SQL Injection (SQLi), Local File Inclusion (LFI), Cross-Site Scripting (XSS), and OGNL Java Injection (which accounted for more than 8 million attempts during this reporting period). OGNL Java Injection, made famous due to the Apache Struts vulnerability, continues to be used by attackers years after patches have been issued.

In the financial services industry, criminals have also started launching DDoS attacks as a distraction to conduct credential stuffing attacks or to exploit a web-based vulnerability. Over the course of 18 months, Akamai uncovered more than 800 DDoS attacks against the financial services industry alone.

Attackers are targeting financial services organizations at their weak points: the consumer, web applications and availability, because that's what works, said McKeay. Businesses are becoming better at detecting and defending against these attacks, but point defenses are bound to fail. It requires being able to detect, analyze, and defend against an intelligent criminal who's using multiple different types of tools for a business to protect its customers. For more than twenty years, Akamai has been leveraging its unique visibility into the full spectrum of attacks to help protect customers from these types of ever-evolving nefarious activities.

The criminal economy thrives, in part, because they target the financial services industry. By targeting banks for example, criminals attempt to steal sensitive data, and then turn around and use that same data to open fake accounts and lines of credit. Its a continuous cycle of crime. There is a deep level of irony in the fact that criminals are targeting the very industry they need to survive. While financial institutions are becoming better at detecting these attacks, adversaries continue to find success with old tricks, and that's a problem.

The Akamai 2019 State of the Internet / Security Report is available for download here. For additional information where the security community can access, engage with, and learn from Akamai's threat researchers and the insight that the Akamai Intelligent Edge Platform affords into the evolving threat landscape, visit Akamai's Threat Research Hub.

About Akamai Akamai secures and delivers digital experiences for the world's largest companies. Akamai's intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help them realize competitive advantage through agile solutions that extend the power of their multi-cloud architectures. Akamai keeps decisions, apps and experiences closer to users than anyone - and attacks and threats far away. Akamai's portfolio of edge security, web and mobile performance, enterprise access and video delivery solutions is supported by unmatched customer service, analytics and 24/7/365 monitoring. To learn why the world's top brands trust Akamai, visit www.akamai.com, blogs.akamai.com, or @Akamai on Twitter. You can find our global co
LINK: https://www.akamai.com/uk/en/about/news/press/2019-press/state-of-the-...
See more stories from akami

Most recent headlines

05/01/2027

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be demoed at CES 2026

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...

07/10/2026

Dalet Flex LTS Delivers Smarter Media Operations from Ingest to Distribution

Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...

06/09/2026

Dolby and MagentaTV Bring Fans Closer to the FIFA World Cup 2026 in Germany with Dolby Vision and Dolby Atmos

June 9 2026, 23:00 (PDT) Dolby and MagentaTV Bring Fans Closer to the FIFA Worl...

21/08/2026

FOX Sports Rolls Out Its Most Ambitious Live Motorsports Production' Ever at IndyCar Freedom 250 GP in DC

A massive deployment of specialty cameras, graphics, and AR will showcase the na...

21/08/2026

Creative Studio Zookeeper Embraces Pinball Motif for West Coast Conference PSA

The West Coast Conference unveiled its new 30-second public service announcement, the latest expression of the Conference's We Rise in the West brand iden...

21/08/2026

ESPN Soft-Launches a New NFL Graphics Package, Scorebug During Thursday Night's Raiders-Texans Preseason Game

New look will serve as the foundation for ESPN's upcoming NFL season and Sup...

21/08/2026

ESPN to Debut Little League Alumni Alt-Cast for 2026 MLB Little League Classic

ESPN will air the ninth annual MLB Little League Classic presented by New York Life on Sunday, August 23, at 7 p.m. ET from Historic Bowman Field in Williamspor...

21/08/2026

His Story Becomes Part of Football History': Dean Grossman Honors His Father Sandy With Pete Rozelle Award Speech

In an emotional acceptance speech in Canton, Grossman celebrated the pioneering ...

21/08/2026

Rapid Flow release miniGRID

Hardware-style timing shifts for software instruments Following on from the release of Omniclock, Rapid Flow have launched a new sequencer plug-in that can ...

21/08/2026

Love Synthesizers announce First Love pre-orders

Highly anticipated synthesizer ships in October 2026 Iceland-based Love Synthesizers have announced that their highly anticipated synthesizer is now availab...

21/08/2026

The Forsytes' Adds Gregg Sulkin & Gabriel Antunes As PBS Masterpiece Series Starts Filming Season 3

Masterpiece PBS The Forsytes has expanded its cast as its begins production in ...

21/08/2026

BBC reveals haunting first look and further casting for The Witch Farm

The BBC has unveiled first-look pictures from The Witch Farm, a new ghost story and mystery set in the Welsh countryside, coming soon to BBC iPlayer and BBC One...

21/08/2026

A first look at Edward Bluemel as Hercule Poirot.

The BBC and BritBox have revealed the first look of Edward Bluemel as Hercule Poirot in the forthcoming six-part series Hercule from Mammoth Screen and Agatha C...

21/08/2026

Inside Euphoria's Editorial Heart: Aaron I. Butler, ACE on craft, collaboration and controlled madness

Our priority was making the best, most powerful, most meaningful story possible,...

21/08/2026

Clear-Com Appoints Venuetech as its Main Partner for the Middle East

eds3_5_jq(document).ready(function($) { $(#eds_sliderM519).chameleonSlider_2_1({ content_source:......

21/08/2026

Techex Names Stuart Almond as Chief Revenue Officer

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Avid Brings Agentic Media Production to IBC2026

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Avid brings agentic media production to IBC2026

Avid will unveil how it is transforming production to help media organizations unite content, agentic workflows, and business insights at IBC2026 (RAI Amsterda...

21/08/2026

Grass Valley Connects SDI IP and Software as One Unified...

New routing, modular processing, orchestration and monitoring capabilities bridge dedicated hardware and software-based processing as part of the Dynamic Media ...

21/08/2026

Indiana Pacers Selects DAZN As Exclusive Streaming Partner

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Chyron To Showcase Newsroom Advancements At IBC 2026

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Broadpeak to Launch Multiview as a Service at IBC2026

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

University of Maryland Deploys Sony FX30 Cameras

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Study: FAST Sports Programming Surges

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Spectrum SportsNet LA Launches in Former Cox Markets

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

ESPN Airs Its Most-Watched WNBA Game

Share Copy link Facebook X Linkedin Bluesky Email...

21/08/2026

Wisycom Wireless and DPA Microphones Support Pope Leo XIV...

When hundreds of thousands of people gather to hear a single voice, there is no room for compromise. Every word must be delivered clearly, every wireless transm...

21/08/2026

Telestream and ScorePlay Turn Live Sports into Immediate...

Telestream, a global leader in media workflow technologies, today announced a strategic partnership with ScorePlay, the AI-powered media infrastructure that spo...

21/08/2026

NUGEN Audio Launches New Post and Producer Subscription P...

NUGEN Audio announces the launch of its new Post Plan and Producer Plan, two flexible subscription offerings designed to give audio professionals short term acc...

21/08/2026

Join the Screen Currency 2026 Ask Me Anything (AMA) Online

Join the Screen Currency 2026 Ask Me Anything (AMA) Online 20 August 2026 (L-R): Adrian Coates, Grainne Brunsdon, Deirdre Brennan, Rachael Perkins Got questio...

21/08/2026

** MEDIA ALERT ** VIZ Media Takes Over Anime NYC with BLEACH, BLACK TORCH, MAO and More

** MEDIA ALERT ** VIZ Media Takes Over Anime NYC with BLEACH, BLACK TORCH, M...

21/08/2026

Take five with Sophie

Tell us a little bit about your job I'm a Marketing Manager and work across a mix of clients and projects. No two days are ever quite the same, which defini...

21/08/2026

Irish Lottery heist documentary to air on RT

Beat The Lotto dives into the plot behind the 1980s National Lottery scandal 24 August 2026 at 9:35pm on RT One and RT Player Beat The Lotto is the story o...

21/08/2026

The Late Late Toy Show kicks off search for this year's stars

The countdown to the most wonderful night of the year has officially begun! Host Patrick Kielty is gearing up for another unforgettable Late Late Toy Show nig...

21/08/2026

New children's series Bellie and Whizz at Big School set to air on RT KIDSjr & RT Player from Monday, 24th August

Meet puppet duo Bellie and Whizz, who are about to explore all the big feelings ...

20/08/2026

NEP's Summer of Soccer Didn't End at World Cup: 1,100+ Domestic Productions Follow the Final

From host-broadcaster and rightsholder support in June and July to MLS, NWSL, US...

20/08/2026

SVG GameDay, Ep. 27: San Jose Sharks' Emily Garner - Production Tales From the Shark Tank

In-venue and creative video staffers at the professional and collegiate level ha...

20/08/2026

IBC 2026: Veritone To Showcase Enterprise AI and Media Supply Chain Automation

At IBC this year, Veritone (14.A56) is bringing two connected themes to the booth: architectural independence in enterprise AI, and the automation of the media ...

20/08/2026

Telestream and ScorePlay Partner to Connect Live Sports Ingest with Media Management

Telestream and ScorePlay have announced a partnership combining Telestream's...

20/08/2026

Grand Slam of Curling and Rock League Sign Multi-Year Deal with ESPN

The Grand Slam of Curling and Rock League have announced a three-year agreement with ESPN, bringing more than 300 hours of live curling coverage to U.S. audienc...

20/08/2026

Nielsen Announces Measurement Enhancements Ahead of Fall TV Season

Nielsen has announced a series of enhancements to its Big Data + Panel currency measurement methodology, taking effect August 31. The updates were developed in ...

20/08/2026

ORF Deploys Net Insight Nimbra Platform for Nationwide IP Contribution Network

Net Insight has been selected by service provider Big Blue Marble (formerly ORS Group) to provide its Nimbra platform as the core media transport solution for a...

20/08/2026

2026 US Open Launches Fan Activations Across New York City

The 2026 US Open will bring a series of free fan activations across New York City ahead of and during the tournament, which runs August 23-September 13. We...

20/08/2026

Bridge Technologies Adds TS Playout to VB330 and VB220 Monitoring Probes

Bridge Technologies will announce a transport stream (TS) playout feature for its VB330 and VB220 compressed monitoring probes at IBC2026 (Booth 1.A71). The fe...

20/08/2026

IBC 2026: ENCO To Showcase AI and Automation Solutions

ENCO will demonstrate solutions across captioning, translation, AI production tools, automation, and virtual production at IBC2026 (Stand 7.A34, Amsterdam RAI, ...

20/08/2026

IBC 2026: MultiDyne MRMC To Exhibit for First Time as Part of MultiDyne Organization

MultiDyne Video and Fiber Optic Systems will demonstrate camera robotics and mot...

20/08/2026

IBC 2026: Chyron Showcases Newsroom Workflow Solutions

Chyron will demonstrate news workflow solutions at IBC2026 (Stand 7.A23), marking the company's 60th anniversary. Highlights include updates to PRIME HTML, ...

20/08/2026

Spectrum SportsNet LA Now Available to Customers in Former Cox Markets

Spectrum SportsNet LA, the exclusive television home of the Los Angeles Dodgers, is now available to Spectrum customers in former Cox markets following the clos...

20/08/2026

IBC 2026: swXtch.io Launches Expanded SRT Distribution and Native Multicast Services

swXtch.io will unveil expanded Global SRT Distribution and native multicast tran...

20/08/2026

Transformation Church Deploys Riedel Artist Intercom System

Riedel Communications has announced that Transformation Church in the United States has deployed a communications system built around the Artist intercom ecosys...