21.03.2019 02:30

Akamai State of the Internet Security Report: Retailers Most Common Credential Stuffing Attack Victim; Points to Dramatic Rise in API Traffic as Key Trend


HONG KONG and TAIPEI, Taiwan, March 21, 2019 /PRNewswire/ -- According to the Akamai 2019 State of the Internet / Security: Retail Attacks and API Traffic report, hackers directed credential abuse attempts at retail sites more than 10 billion times from May to December last year, making retail the most targeted segment studied. The report also spotlights two other pressing security concerns: the preponderance of API-call traffic on the web and the apparent misrepresentation of IPv6-based traffic.

The Company studied the credential abuse technique known as credential stuffing, where hackers systematically use botnets to try stolen login information across the web. They target login pages for banks and retailers on the premise that many customers use the same login credentials for multiple services and accounts. Interest in retail is driven by the value of merchandise, which hackers acquire through compromised accounts and then frequently resell.

According to the report, the insidious AIO bots that hackers deploy are multi-function tools that enable quick purchases by leveraging credential stuffing and a number of evasion techniques. A single AIO bot can target more than 120 retailers at once.

Media & entertainment properties are notable credential abuse victims as well, according to the report. Their value is in the personal information those sites maintain. End users share credit card information and demographic data when they sign up for over-the-top (OTT) online streaming services, for example. This type of data has high value on the black market. Akamai also noted significant numbers of credential abuse attacks against financial services, hotel and travel, and consumer goods sites.

"The techniques change, but the motivation remains the same: greed," said Martin McKeay, Security Researcher and Editorial Director of the State of the Internet / Security report. "Retailers remain on the front lines, because stolen merchandise sells quickly and at a premium. And for that reason, the data shows which merchandise is of the highest value: Apparel sites are targeted the most."

Within the retail industry outside of the apparel vertical, Akamai tracked credential stuffing attempts against direct commerce, department stores, office supply stores, and fashion, such as jewelry and watches.

API Traffic Prevalence and Potential IPv6 Underreporting Point to Security Concerns

API calls represent 83 percent of web traffic, according to an October 2018 Akamai traffic review detailed in the report. The majority of API traffic is for custom applications, which is the result of digital transformations and cloud-based application deployment. For security teams, growth in API volume is important when considering risk, because some security tools are not equipped to manage API traffic.

"The state of web applications is fluid, and many API calls are application or company-specific and require a different security approach than HTML traffic, which is seemingly static," McKeay explained.

Meanwhile, DNS traffic analysis outlined in the report notes that IPv6 traffic might be underreported, since many systems capable of IPv6 usage still prefer IPv4. This could indicate device misconfiguration or improper monitoring and network blind spots, a security concern. Since IPv6 is still believed to be a minority of web traffic, it is not a major selling point for a number of security tools.

A complimentary copy of the 2019 State of the Internet / Security: Retail Attacks and API Traffic report is available for download here. For additional information about credential abuse -- specifically credential stuffing -- and advice for organizations facing these types of attacks, visit here.  For information about other Akamai solutions, including for DNS security, visit here.


The Akamai 2019 State of the Internet / Security: Retail Attacks and API Traffic report combines attack data from across Akamai's global infrastructure and represents the research of a diverse set of teams throughout the company. The report provides analysis of the current cloud security and threat landscape, as well as insight into attack trends using data gathered from the Akamai Intelligent Platform. The contributors to the State of the Internet / Security Report include security professionals from across Akamai, including the Security Intelligence Response Team (SIRT), the Threat Research Unit, Information Security, and the Custom Analytics group.

About Akamai

Akamai secures and delivers digital experiences for the world's largest companies. Akamai's intelligent edge platform surrounds everything, from the enterprise to the cloud, so customers and their businesses can be fast, smart, and secure. Top brands globally rely on Akamai to help them realize competitive advantage through agile solutions that extend the power of their multi-cloud architectures. Akamai keeps decisions, apps and experiences closer to users than anyone -- and attacks and threats far away. Akamai's portfolio of edge security, web and mobile performance, enterprise access and video delivery solutions is supported by unmatched customer service, analytics and 24/7/365 monitoring. To learn why the world's top brands trust Akamai, visit,, or @Akamai on Twitter.

Logo -

SOURCE Akamai Technologies

Börse Stuttgart Anlegerclub

Die richtige Strategie für die Börsenkrise

Stecken Sie nicht den Sand in den Kopf, sondern kaufen Sie die richtigen Aktien. Erfahren Sie im aktuellen Anlegermagazin mehr über attraktive Qualitätsaktien und zyklische Aktien
Kostenfrei registrieren und lesen!

Heute im Fokus

DAX leichter -- Bitcoin über 5.500 US-Dollar -- Coca-Cola übertrifft Prognosen -- Ermittlungen gegen VW-Manager wegen illegaler Boni? -- Bank- und Stahlwerte, Wirecard, Bayer, Tesla im Fokus

Verizon übertrifft Gewinnerwartungen und hebt Ausblick an. P&G steigert Umsatz. United Technologies verdient deutlich mehr als erwartet. E.ON treibt Eintritt in japanischen Windenergiemarkt voran. PUMA setzt sich höhere Nachhaltigkeitsziele. Chinas Starbucks-Rivale Luckin Coffee beantragt Börsengang in den USA.

Die 5 beliebtesten Top-Rankings

Die beliebtesten Arbeitgeber in Deutschland
Hier gibt es die beliebtesten Jobs
Die zehn größten Kapitalvernichter
Hier wurde am meisten Anlegergeld verbrannt
DIe innovativsten Unternehmen
Diese Unternehmen sind am fortschrittlichsten
Das hat sich geändert
Diese Aktien hat George Soros im Depot
Diese Aktien hat Warren Buffett im Depot
Einige Änderungen unter den Top-Positionen
mehr Top Rankings


Wirtschaftsminister Peter Altmaier (CDU) sieht sich derzeit starker Kritik ausgesetzt. Zu Recht?

Online Brokerage über Brokerage
Handeln Sie für nur 5 Euro Orderprovision* pro Trade aus der Informationswelt von!


Oskar ist der einfache und intelligente ETF-Sparplan. Er übernimmt die ETF-Auswahl, ist steuersmart, transparent und kostengünstig.
Zur klassischen Ansicht wechseln
Kontakt - Impressum - Werben - Pressemehr anzeigen
Top News
Beliebte Suchen
DAX 30
Euro US-Dollar
Wirecard AG747206
Daimler AG710000
Deutsche Bank AG514000
Apple Inc.865985
Aurora Cannabis IncA12GS7
Volkswagen (VW) AG Vz.766403
Deutsche Telekom AG555750
Scout24 AGA12DM8