Sony Pixel Power calrec Sony

Akamai Security Research: Loyalty Programs Continue to be Targeted by Criminals as Account Data is Easily Sold or Traded

22/10/2020

Akamai Security Research: Loyalty Programs Continue to be Targeted by Criminals as Account Data is Easily Sold or Traded Retail, Hospitality, Travel industries were hit with over 63 billion credential stuffing and 4 billion web application attacks in last two years

Cambridge, MA | October 21, 2020

Akamai (NASDAQ: AKAM) the intelligent edge platform for security and delivering digital experiences, today published the State of the Internet / Security report: Loyalty for Sale - Retail and Hospitality Fraud. The report details criminal activity targeting the retail, travel, and hospitality sectors with attacks of all types and sizes between July 2018 and June 2020. The report also includes numerous examples of criminal ads from the darknet illustrating how they cash in on the results from successful attacks and the corresponding data theft.

Criminals are not picky -- anything that can be accessed can be used in some way, said Steve Ragan, Akamai security researcher and author of the State of the Internet / Security report. This is why credential stuffing has become so popular over the past few years. These days, retail and loyalty profiles contain a smorgasbord of personal information, and in some cases financial information too. All of this data can be collected, sold, and traded or even compiled for extensive profiles that can later be used for crimes such as identity theft.

During the COVID-19 pandemic-related lockdowns in Q1 2020, criminals took advantage of the worldwide situation and circulated password combination lists, targeting each of the commerce industries featured in the report. It was during this time that criminals started recirculating old credential lists in an effort to identify new vulnerable accounts, leading to a significant uptick in criminal inventory and sales related to loyalty programs.

Between July 2018 and June 2020, Akamai observed more than 100 billion credential stuffing attacks in total. In the commerce category - comprising the retail, travel, and hospitality industries - there were 63,828,642,449 recorded. More than 90% of the attacks in the commerce category targeted the retail industry.

Credential stuffing isn't the only way that criminals target the retail, travel, and hospitality industries. They target organizations in these industries at the source using SQL Injection (SQLi) and Local File Inclusion (LFI) attacks. Between July 2018 and June 2020, Akamai observed 4,375,711,860 web attacks against retail, travel, and hospitality, accounting for 41% of the overall attack volume across all industries. Within this data set, 83% of those web attacks targeted the retail sector alone. SQLi attacks are an evident favorite among criminals, accounting for just under 79% of the total web application attacks against retail, travel, and hospitality.

As the global economy prepares for a holiday shopping season, it does so in an environment that has changed radically due to the pandemic. Consumers will not be standing outside of brick and mortar stores waiting for the latest deals in the same way they have in the past. They're going to log-in, collect their reward points, and maybe use loyalty programs to gain some discounts or other perks just for being a member.

Considering everything that goes into a successful loyalty program, and the information people need to provide in order to take part, the criminals have everything they need to get started in a number of crime-related ventures, from account takeovers, to straight-up identity theft. So, while an individual's loyalty to a merchant, airline, or hotel chain might not literally be for sale, there's a good chance the account associated with such programs might be.

All businesses need to adapt to external events, whether it's a pandemic, a competitor, or an active and intelligent attacker, Ragan concluded. Some of the top loyalty programs targeted require nothing more than a mobile number and a numeric password, while others rely on easily obtained information as a means of authentication. There is an urgent need for better identity controls and countermeasures to prevent attacks against APIs and server resources.

The Akamai 2020 State of the Internet / Security report, Loyalty for Sale - Retail and Hospitality Fraud is available here. In addition, Akamai will host a webinar on Thursday, October 22 at 11:00 a.m. ET where Akamai security experts discuss the findings of this latest report. To register for the webinar, visit here.

For additional information, the security community can access, engage with, and learn from Akamai's threat researchers and the insight that the Akamai Intelligent Edge Platform affords into the evolving threat landscape, visit Akamai's Threat Research Hub.

About Akamai Akamai secures and delivers digital experiences for the world's largest companies. Akamai's intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help them realize competitive advantage through agile solutions that extend the power of their multi-cloud architectures. Akamai keeps decisions, apps and experiences closer to users than anyone - and attacks and threats far away. Akamai's portfolio of edge security, web and mobile performance, enterprise access and video delivery solutions is supported by unmatched customer service, analytics and 24/7/365 monitoring. To learn why the world's top brands trust Akamai, visit www.akamai.com, blogs.akamai.com, or @Akamai on Twitter. You can find our global contact information at www.akamai.com/locations.
LINK: https://www.akamai.com/uk/en/about/news/press/2020-press/state-of-the-...
See more stories from akami

Most recent headlines

04/02/2025

Spotify Reports Fourth Quarter 2024 Earnings

Today, we announced our fourth quarter 2024 earnings, closing Q4 stronger than ever by outperforming across key metrics and celebrating our first full year of p...

04/02/2025

Spotify rapporterar intkter fr fjrde kvartalet 2024

Idag rapporterar vi int kter f r fj rde kvartalet 2024. Vi avslutade Q4 starkare n n gonsin genom att vertr ffa f rv ntningarna p v ra nyckeltal och kan d rm...

04/02/2025

SGL Carbon opts for green electricity at its German sites

As a technology-based company and one of the worlds leading companies in the development and production of carbon-based solutions, SGL Carbon opts for innovativ...

04/02/2025

ST Engineering iDirect Names Sridhar Kuppanna as Chief Technology Officer

Ground segment technology innovator appoints new CTO to execute bold technological vision Herndon, Va., February 4, 2025 ST Engineering iDirect, global leade...

04/02/2025

L3Harris Signs Multi-Year Pilot Training Agreement With Thai Airways

L3Harris has signed a two-year agreement with Thai Airways International to provide training service on its A320 Full Flight Simulator (FFS). This significant a...

04/02/2025

US Air Force Completes First Flight of L3Harris Viper Shield Electronic Warfare System

L3Harris' all-digital electronic warfare suite, Viper Shield , completed its...

04/02/2025

Radio Botswana chooses Calrec's IP-native Type R mixing system

The shift from analogue to IP was driven by a desire for greater flexibility in our operations. IP simplifies connectivity, reduces the physical footprint of th...

04/02/2025

Simplifying Gray Media News Operations with Calrec's Type R

Streamline, standardise and save: how Gray Media has simplified news operations At TVNewsCheck's News Tech Forum 2024, Gray Media's Peter Gogas and Calr...

04/02/2025

Bending Spoons closes $233 million acquisition of Brightcove

Boston, MA-February 4, 2025 | Bending Spoons, the Italy-based technology company, completed its previously announced acquisition of US-based streaming technolog...

04/02/2025

Grup Mediapro to Collaborate with Google Cloud on Gen AI

BARCELONA Grup Mediapro and Google Cloud have expanded their collaboration to create an innovation lab focused on generative AI to develop solutions for the med...

04/02/2025

EditShare Receives SOCE 2 Type II Certification

WATERTOWN, Mass. EditShare this week said it has received SOC 2 Type II certification, an independently audited evaluation of an organization's information ...

04/02/2025

Executive Creative Director Halle Petro Named Partner of Sonic Union

Executive Creative Director Halle Petro Named Partner of Sonic Union Brie Clayton February 4, 2025 0 Comments Sonic Union is excited to announce Execu...

04/02/2025

Blackmagic Design Announces Blackmagic Camera for Android 2.0 Update

Blackmagic Design Announces Blackmagic Camera for Android 2.0 Update Brie Clayton February 4, 2025 0 Comments New update adds support for Xiaomi Pad 6...

04/02/2025

CETA Software Launches Artist Access: The Time-Tracking Tool for Creative Teams

CETA Software Launches Artist Access: The Time-Tracking Tool for Creative Teams Brie Clayton February 4, 2025 0 Comments CETA Software, creators of p...

04/02/2025

OWC Announces General Availability Launch of OWC Dock Ejector 2.0

OWC Announces General Availability Launch of OWC Dock Ejector 2.0 Brie Clayton February 4, 2025 0 Comments The Ultimate Tool for Efficiently and Safel...

04/02/2025

Colourist Claudio Del Bravo on grading Queer

Explaining the process to TVBEurope, Del Bravo said the films look was inspired by the Technicolor three-strip' process, evoking the rich colours of early ...

04/02/2025

Paramount, Nielsen Sign Multiyear Measurement and Analytics Deal

NEW YORK Paramount Global and Nielsen have inked a new, multiyear deal that will provide measurement for all of the company's platforms, including national ...

04/02/2025

2d Animated Short Concerning a Project for Schools

2d Animated Short Concerning a Project for Schools Brie Clayton February 3, 2025 0 Comments 2d animated short concerning a project for schools Febru...

04/02/2025

Step by step guide to using 3D Models in After Effects

Step by step guide to using 3D Models in After Effects Graham Quince February 3, 2025 0 Comments Since 2024, Adobe After Effects has had native suppor...

04/02/2025

Powerful Premiere Automation with new Excalibur Update

Powerful Premiere Automation with new Excalibur Update Colin Smith February 3, 2025 0 Comments This tutorial takes you through the new update for auto...

04/02/2025

Cinematography of A Complete Unknown: Shooting 12,800 iso Sony Venice 2 to create a 1960's era film

Cinematography of A Complete Unknown: Shooting 12,800 iso Sony Venice 2 to creat...

04/02/2025

DIY to DA: Ela Minus Breaks Through

DIY to D A: Ela Minus Breaks Through The electronic artist and producer tells Rolling Stone about her new album, D A, and how shes forged a career outside the...

04/02/2025

The Future of Football? Technology and Entertainment Merge in the Kings World Cup Nations

The future of football? Technology and entertainment merge in the Kings World Cu...

04/02/2025

Virtual Production and AR Graphics: Demystifying the Tools, Technologies, and Trends

Virtual Production and AR Graphics: Demystifying the Tools, Technologies, and Tr...

04/02/2025

SVG All-Stars: Russell Fink, Senior Director, Programming and Content Analytics, SNY

SVG All-Stars: Russell Fink, Senior Director, Programming and Content Analytics,...

04/02/2025

SVG New Sponsor Spotlight: farmerswife's Jodi Clifford on Organizing Your Productions Like a Professional

SVG New Sponsor Spotlight: farmerswife's Jodi Clifford on Organizing Your Pr...

04/02/2025

EA Acquires TRACAB Technologies as It Looks to Move Beyond Games

EA Acquires TRACAB Technologies as It Looks to Move Beyond Games EA believes TRACABs sports tracking/analysis technology will help to make the EA SPORTS App the...

04/02/2025

Kingdom Come: Alamiya Media on Bringing the Supercoppa Italiana and Supercopa de Espaa to Saudi Arabia

Kingdom come: Alamiya Media on bringing the Supercoppa Italiana and Supercopa de...

04/02/2025

Alamiya Media at 50: Preparing for Rapid Change, an International Broadcast Center and the FIFA World Cup

Alamiya Media at 50: Preparing for rapid change, an international broadcast cent...

04/02/2025

An update on our TV and broadband prices

An update on our TV and broadband pricesTuesday 4 February 2025 An update on our TV and broadband prices Devesh Raj, Chief Operating Officer, Sky This April,...

04/02/2025

Sky extends partnership with the PDC to remain the home of darts until 2030

Sky extends partnership with the PDC to remain the home of darts until 2030Tuesday 4 February 2025 Following another record-breaking PDC World Darts Championsh...

04/02/2025

Frankfurt is the world's first airport to regularly use walk-through scanners from Rohde & Schwarz for passengers

Frankfurt is the world's first airport to regularly use walk-through scanner...

04/02/2025

Riedel Unveils Next Generation of StageLink Edge Devices

Wuppertal February 4, 2025 Riedel Unveils Next Generation of StageLink Edge DevicesRiedel Communications today announced the launch of its StageLink family of...

04/02/2025

Fox Corporation Reports Second Quarter Fiscal 2025 Financial Results

Fox Corporation Reports Second Quarter Fiscal 2025 Financial Results NEW YORK, NY, February 4, 2025 - Fox Corporation (Nasdaq: FOXA, FOX; FOX or the Compan...

04/02/2025

Introducing our fully digital, true diversity wideband wireless mic solution

DPA Microphones is moving into the wireless market with the release of its new N-Series Digital Wireless System at ISE 2025 (Stand 7P600). A fully digital, true...

04/02/2025

2025-02-04

CUPERTINO, CALIFORNIA Apple today introduced Apple Invites, a new app for iPhone that helps users create custom invitations to gather friends and family for any...

04/02/2025

ABS appoints Sameer Karimbhai as New General Counsel

ABS appoints Sameer Karimbhai as New General Counsel...

04/02/2025

Thales Alenia Space signs a contract with Mohammed Bin Rashid Space Centre to develop the Emirates Airlock Module, a critical element of Lunar Gateway

Facebook Twitter LinkedIn Thales Alenia Space strengthens its cooperation with the UAE as a key partner in future space missions Cannes, February 4th, 20...

04/02/2025

RT Internship Programme 2025 - Applications Now Open

We're thrilled to announce that applications for the 2025 RT Internship Programme are now open....

04/02/2025

Jack Woolley tops the Dancing with the Stars leaderboard in Dedicated Dance Week

Jack Woolley topped the leaderboard in what was an emotional night on Dancing with the Stars, as the remaining nine couples took to the floor for Dedicated Danc...

03/02/2025

Spotify's This Is Taylor Swift' Immersive Experience Connects Swifties Across Asia to Their Favorite Anthem

If you're one of the many Swifties living in Asia, you're in for a treat...

03/02/2025

5 Spotify Hacks Every Free User Needs To Know

Whether you're discovering your new favorite song or queuing up the latest episode of the hottest podcasts, Spotify is always innovating to deliver the best...

03/02/2025

SBS boosts commitment to Indigenous leadership and innovation with Executive team update

SBS boosts commitment to Indigenous leadership and innovation with Executive tea...

03/02/2025

L3Harris Technology Enhances US Torpedo Capability

The L3Harris IPLCS is a fiber-optic tether connecting a torpedo to the origin vessel, providing data in real time. Credit: L3Harris...

03/02/2025

VidTrans 2025 to Focus on Security, Dynamic Media Production

BOTHELL, Wash. Video Services Forum (VSF) today announced that the VidTrans 2025 conference and exposition will take place Feb. 25-27 at the Marina del Rey Marr...

03/02/2025

Legislation Proposed to Require Refunds During TV Blackouts

WASHINGTON Last week Rep. Pat Ryan (D-N.Y.) and Sen. Chris Murphy (D-Conn.) introduced the Stop Sports Blackouts Act to make cable and satellite companies ref...

03/02/2025

New Vendors Gain Amazon Prime Video Preferred Certification

Amazon Prime Video has added more companies to its Preferred Vendor Services Program....

03/02/2025

Grand Slam Track Inks Media Rights Deal with The CW, NBC Sports

BURBANK, Calif. The CW, NBC Sports and Grand Slam Track, a new global track competition, have announced a media rights deal that makes The CW the exclusive U.S....