Sony Pixel Power calrec Sony

Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers

01/08/2019

Akamai Threat Research: Phishing and Credential Stuffing Attacks Remain Top Threat to Financial Services Organizations and Customers Latest State of The Internet / Security Report Observes 3.5 Billion Malicious Login Attempts Targeting the Financial Services Sector; Illustrates Akamai's Unique Threat Visibility

Cambridge, MA | July 31, 2019

Newly released data from Akamai's 2019 State of the Internet / Security Financial Services Attack Economy Report has found that 50% of all unique organizations impacted by observed phishing domains were from the financial services sector. The data shows that, in addition to unique phishing attempts, adversaries also leveraged credential stuffing attacks to the tune of 3.5 billion attempts during an 18-month period, putting the personal data and banking information of financial services customers at risk.

The report indicates that between December 2, 2018 and May 4, 2019, nearly 200,000 (197,524 to be exact) phishing domains were discovered, and of those domains, 66% targeted consumers directly. When taking the phishing domains targeting consumers only into consideration, 50% of those targeted companies in the financial services industry.

We've seen a steady rise in credential stuffing attacks over the past year, fed in part by a growth in phishing attacks against consumers, said Martin McKeay, Security Researcher at Akamai and Editorial Director of the State of the Internet / Security Report. Criminals supplement existing stolen credential data through phishing, and then one way they make money is by hijacking accounts or reselling the lists they create. We're seeing a whole economy developing to target financial services organizations and their consumers.

Once criminals have succeeded in their schemes, they need to process their ill-gotten data and funds. As Akamais report highlights, one method of dealing with this situation centers on bank drops' - packages of data that can be used to fraudulently open accounts at a given financial institution. Bank drops will typically include a persons stolen identity - often called fullz by criminals online, including name, address, date of birth, Social Security details, drivers license information, and credit score. Secure access to the fraudulent accounts comes via remote desktop servers, which are matched to the geographic location of the bank and the fullz.

Financial institutions continue to investigate the ways in which criminals are opening these drop accounts, and are working diligently to stay ahead of the curve. What most businesses don't realize, however, is that criminals are recycling old attack methods.

Akamai's findings revealed that 94% of observed attacks against the financial services sector came from one of four methods: SQL Injection (SQLi), Local File Inclusion (LFI), Cross-Site Scripting (XSS), and OGNL Java Injection (which accounted for more than 8 million attempts during this reporting period). OGNL Java Injection, made famous due to the Apache Struts vulnerability, continues to be used by attackers years after patches have been issued.

In the financial services industry, criminals have also started launching DDoS attacks as a distraction to conduct credential stuffing attacks or to exploit a web-based vulnerability. Over the course of 18 months, Akamai uncovered more than 800 DDoS attacks against the financial services industry alone.

Attackers are targeting financial services organizations at their weak points: the consumer, web applications and availability, because that's what works, said McKeay. Businesses are becoming better at detecting and defending against these attacks, but point defenses are bound to fail. It requires being able to detect, analyze, and defend against an intelligent criminal who's using multiple different types of tools for a business to protect its customers. For more than twenty years, Akamai has been leveraging its unique visibility into the full spectrum of attacks to help protect customers from these types of ever-evolving nefarious activities.

The criminal economy thrives, in part, because they target the financial services industry. By targeting banks for example, criminals attempt to steal sensitive data, and then turn around and use that same data to open fake accounts and lines of credit. Its a continuous cycle of crime. There is a deep level of irony in the fact that criminals are targeting the very industry they need to survive. While financial institutions are becoming better at detecting these attacks, adversaries continue to find success with old tricks, and that's a problem.

The Akamai 2019 State of the Internet / Security Report is available for download here. For additional information where the security community can access, engage with, and learn from Akamai's threat researchers and the insight that the Akamai Intelligent Edge Platform affords into the evolving threat landscape, visit Akamai's Threat Research Hub.

About Akamai Akamai secures and delivers digital experiences for the world's largest companies. Akamai's intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help them realize competitive advantage through agile solutions that extend the power of their multi-cloud architectures. Akamai keeps decisions, apps and experiences closer to users than anyone - and attacks and threats far away. Akamai's portfolio of edge security, web and mobile performance, enterprise access and video delivery solutions is supported by unmatched customer service, analytics and 24/7/365 monitoring. To learn why the world's top brands trust Akamai, visit www.akamai.com, blogs.akamai.com, or @Akamai on Twitter. You can find our global co
LINK: https://www.akamai.com/uk/en/about/news/press/2019-press/state-of-the-...
See more stories from akami

Most recent headlines

05/01/2027

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be demoed at CES 2026

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...

07/10/2026

Dalet Flex LTS Delivers Smarter Media Operations from Ingest to Distribution

Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...

09/09/2026

Study: New Streaming TV Series Orders Plumet

Share Copy link Facebook X Linkedin Bluesky Email...

09/09/2026

G&D, VuWall To Introduce vsNEO KVM Platform At IBC2026

Share Copy link Facebook X Linkedin Bluesky Email...

09/09/2026

FCC May Ramp Up Regulation of How Broadcasters Cover Polls

Share Copy link Facebook X Linkedin Bluesky Email...

09/09/2026

Avid to Demo New Avid Content Core Features at IBC2026

Share Copy link Facebook X Linkedin Bluesky Email...

09/09/2026

Wisycom Showcases Latest Innovations at IBC 2026

Wisycom is showcasing the latest additions to its ecosystem of professional RF technologies at IBC 2026 (Stand 8.D60). This includes its new MATF Wideband Anten...

09/09/2026

VisualOn and Cires21 Cut Delivery Bitrate Up to 76 Percen...

AMSTERDAM, IBC2026 VisualOn, Inc. and Cires21 today released an updated joint whitepaper at IBC 2026 demonstrating measurable, high-impact improvements in visu...

09/09/2026

Sony Electronics Introduces Its First Fisheye Zoom G Lens

Sony Electronics Introduces Its First Fisheye Zoom G Lens Brie Clayton September 8, 2026 0 Comments Compact, lightweight SEL814G Full-frame lens deliv...

09/09/2026

Blackmagic Design Announces DaVinci Resolve 21.1

Blackmagic Design Announces DaVinci Resolve 21.1 Brie Clayton September 8, 2026 0 Comments Major update adds AI assistant integration, expanded camera...

09/09/2026

Cuez Integrates AI into a Unified Broadcast Production Workflow

Cuez Integrates AI into a Unified Broadcast Production Workflow Brie Clayton September 8, 2026 0 Comments Cuez announces the expansion of its cloud-ba...

08/09/2026

Comcast Technology Solutions Signs Multi-Year VOD Distribution Agreement with A+E Global Media

Comcast Technology Solutions (CTS) has announced a multi-year agreement with A E...

08/09/2026

Spectra Logic Introduces Media Insight for Faster Discovery, Preview, and Retrieval of Archived Media

Spectra Logic today announced the availability of Media Insight, a new capabilit...

08/09/2026

Rogers and Quebecor Announce 12-Year French-Language NHL Sublicensing Deal

Rogers Communications and Quebecor have announced a 12-year sublicensing agreement for French-language national NHL games beginning with the 2026-27 season. TVA...

08/09/2026

IBC 2026: Skyline Communications and Bridge Technologies to Demonstrate Automated Broadcast Workflows

Skyline Communications and Bridge Technologies will demonstrate two integrations...

08/09/2026

IBC 2026: Boland Communications Makes European Debut of 4K55HDR7SNB

Boland Communications will make the European debut of its 4K55HDR7SNB 55-inch super-narrow-bezel monitor at IBC2026 (Stand 12.C57, RAI Amsterdam, September 11-1...

08/09/2026

Ateme and Comcast Technology Solutions Announce Collaboration for Live Video Delivery

Ateme and Comcast Technology Solutions (CTS) have announced a collaboration comb...

08/09/2026

IBC 2026: Haivision Joins IBC Accelerator Programme on 5G Network Control for Live Production

Haivision has joined the IBC Accelerator Media Innovation Programme as part of t...

08/09/2026

Blackmagic Design Cuts Prices on PYXIS 6K and Cinema Camera 6K

Blackmagic Design has announced price reductions on its PYXIS 6K and Cinema Camera 6K models, effective immediately through Blackmagic Design resellers worldwid...

08/09/2026

IBC 2026: AI-Media to Showcase Multilingual AI Captioning and Translation Platform

AI-Media will demonstrate its LEXI Suite at IBC2026 (Booth 5.C34, September 11-1...

08/09/2026

Bitmovin and Ad Insertion Platform Deploy SGAI Solution for Belgian Broadcaster RTBF

Bitmovin and Ad Insertion Platform (AIP) have announced the first live deploymen...

08/09/2026

IBC 2026: Grass Valley to Demonstrate Story-Centric Newsroom Workflows

Grass Valley will demonstrate story-centric media workflows at IBC2026 (Booth 9.A01, RAI Amsterdam, September 11-14), connecting newsroom production, content ma...

08/09/2026

M2A Media and Ateme Partner to Scale Live Sports Video Delivery

M2A Media and Ateme have announced a partnership integrating Ateme's video processing solutions into M2A Media's MediaToAnywhere platform for live sport...

08/09/2026

IBC 2026: Ikegami to Introduce New UNICAM XE Cameras and Viewfinders

Ikegami will exhibit at IBC2026 (Stand 12.A31, RAI Amsterdam, September 11-14), including a Day 1 introduction of new cameras in the UNICAM XE series. Additiona...

08/09/2026

Caretta Research Shares Top Trends to Watch at IBC 2026

Broadcast industry analysts will be gathering plenty of insights at the 2026 IBC Show this weekend in Amsterdam, but Caretta Research has offered up some though...

08/09/2026

SENSHI and DAZN Announce Global Broadcast Partnership

SENSHI and DAZN have announced a global broadcast partnership that will bring SENSHI's live events free to viewers in more than 200 markets. The partnership...

08/09/2026

ESPN, ESPN2 Begin 4K HDR Rollout in the U.S. with New IP-Based Distribution Pipeline

New architecture built with Evertz will bring 4K HDR to Monday Night Football, N...

08/09/2026

Sauceware Audio release Scorch 2

Built for rap producers, by rap producers Sauceware Audio, the independent plug-in company founded by Grammy-nominated producer Jacob (Travis Scott, 21 Sava...

08/09/2026

Warm Audio unveil the Jude preamps

Classic Sound Techniques design revived Warm Audio's latest release delivers a meticulous recreation of the preamp circuitry employed by the Sound Techn...

08/09/2026

XILS Lab introduce MemoryTone

Latest soft synth inspired by the Memorymoog XILS Lab have just launched a software instrument that draws its inspiration from Moog's iconic Memorymoog,...

08/09/2026

The Airport Chaplain takes off as SBS's biggest launch of 2026

The Airport Chaplain takes off as SBS's biggest launch of 2026 8 September, 2026 Media releases 1.67 million viewers on National Total TV to date Best...

08/09/2026

IBC2026: Haivision Integrates Chyron LIVE into its Workflow

Share Copy link Facebook X Linkedin Bluesky Email...

08/09/2026

Mo-Sys completes reorganisation strengthens management te...

Mo-Sys, the world-leading developer of virtual production, camera robotics and image tracking technology, has completed a business restructuring, which has incl...

08/09/2026

Aicox and TAG Video Systems power monitoring and multivie...

New York, September 8, 2026 The TSAmediaHUB audiovisual contribution and distribution infrastructure developed by Telef nica's Audiovisual Services area re...

08/09/2026

Asharq migrates extended channel line-up to Pebble playou...

Expanded Riyadh operation brings Asharq and Thmanyah services together on a resilient on-premises Pebble platform. Pebble, the leading automation, content mana...

08/09/2026

Techex Extends its Lead in Software Defined Live Video at...

Techex, a pioneering leader in live video workflows, will showcase its broadest software feature set to date at IBC 2026 (Stand 2.B45), extending its lead in so...

08/09/2026

Grass Valley Advances Story-Centric Media Workflows for U...

Visitors to Grass Valley's booth at IBC2026 will be introduced to new Framelight X capabilities that connect content acquisition, management, editing and pu...

08/09/2026

BCNEXXT Showcases Latest Vipe Innovations at IBC2026 Rais...

BCNEXXT will showcase the latest evolution of Vipe at IBC2026 (Stand 2.B09), introducing a series of innovations designed to deliver higher-quality audience exp...

08/09/2026

Bitmovin and Ad Insertion Platform Power First Active Dep...

Bitmovin, a provider of video streaming solutions, has partnered with Ad Insertion Platform (AIP), a leading innovator in advanced ad insertion technologies, to...

08/09/2026

Brainstorm unveils major enhancements to its Suite 7 envi...

Brainstorm, a leading manufacturer of real-time graphics and augmented and virtual production, is announcing a major package of enhancements to its Suite 7 soft...

08/09/2026

Big Blue Marble Collaborates with TDF as Technology Partn...

Big Blue Marble is supporting TDF, French infrastructure and network operator, broadcasting Digital Terrestrial Television (DTT) and radio services, as a techno...

08/09/2026

nxtedition takes agentic AI from newswire to gallery at I...

Agents work inside a single production environment, from incoming wire copy to a live studio show...

08/09/2026

Ceeblue and Layercake Expand Strategic Integration to Lau...

Building on their strategic partnership, Ceeblue and Layercake make the unthinkable possible: scalable sub-second streaming over standard DRM, SSAI, and CDN wor...

08/09/2026

Brainstorm launches Engram a dedicated asset management t...

Brainstorm, a leading manufacturer of real-time graphics, augmented and virtual production, is completing the environment for fast-paced broadcast production wi...

08/09/2026

IBC 2026 - The new Synamedia - solving the business of vi...

A SaaS portfolio built to work together, helping operators grow audiences, monetise smarter and run leaner, on their own terms At IBC 2026 (stand 1.B49) Synam...

08/09/2026

Accedo Selected by PlayOn Sports to Enhance NFHS Network...

Accedo, global provider of video streaming software and services, has been selected by PlayOn Sports, a national leader in high school sports technology, to exp...

08/09/2026

AP brings new connectivity and workflow tech to global ne...

LiveU, the leader in live IP-video solutions, is enabling The Associated Press to take global newsgathering to the next stage with intelligent connectivity and ...

08/09/2026

Mediagenix Personalization Curates Sports Content Around...

Mediagenix, a global leader in smart content solutions to profitably connect the right content to the right audience, today announced the latest evolution of it...

08/09/2026

Appear X5 to enable flyaway contribution for DP World Tou...

Compact, power-efficient X Platform performance brings broadcast-grade reliability and ultra-low latency to space-constrained remote production (REMI) workflows...

08/09/2026

Zixi and Kiloview Partner to Deliver Broadcast-Grade IP V...

Zixi, the leader in live video delivery and workflow orchestration, and Kiloview, a leading provider of professional IP video encoding and decoding solutions, t...