Credential stuffing attacks cause heartache for the financial sector

[silversurfer]

The financial industry has always been a target for cyberattackers. Credit card data, customer information, and the wealth of corporate data available for the taking has ensured that cybercriminals will try, again and again, to compromise companies in the sector.

According to cybersecurity firm Akamai's 2018 State of the Internet report, organizations in the financial sector must also be wary of a new trend -- the increasing popularity of credential stuffing attacks.
Often utilized by botnets, credential stuffing describes the use of stolen or leaked credentials in automatic injection attacks. Automated scripts hammer online services with credentials in the hopes of a password and username or email address being accepted as legitimate -- which, in turn, permits account hijacking and takeovers.

Source: https://www.zdnet.com/article/credential...al-sector/