Account Takeovers | Is Your Retail Website Safe?

Presented by

Thomas Platt, Traffic Management and Web Security Expert

About this talk

Account takeover fraud isn’t going to stop and the tactics engaged by cyber criminals are becoming more sophisticated every day. The retail market is heavily targeted by criminals and in 2016 alone there were over 3 billion credentials stolen with malicious intent. A growing number of high profile retailers have suffered from data breaches in the last year alone, leading to Verizon noting account takeovers as the biggest threat to web applications today. An account takeover can have a butterfly effect with credential stuffing leading to brute force attacks, identity theft and huge financial and reputational losses. If your website has a login page, there will be malicious bots attacking your page right now, trying to create and exploit security weaknesses. How TrafficDefender can help At TrafficDefender our experts beat the bots every day to ensure our clients are always one step ahead of criminal traffic. This webinar provides insight into the rise of account takeover attacks in the retail industry and what steps you need to implement to defend against the trillion pound cyber-crime industry. Watch the recording to learn more about: - The rise of account takeover attacks in the retail market. - The anatomy of an account takeover attack. - Best practice for identifying and preventing malicious bots from cracking customer accounts.

Related topics:

More from this channel

Upcoming talks (0)
On-demand talks (3)
Subscribers (454)
TrafficDefender protects the internet from bots. Bots are everywhere, accounting for as much as 52% of traffic to web sites. Some are good bots but an increasing number are malicious bots, they all need to be managed. Hackers use bots to launch pre-attack scans, exploit vulnerabilities, execute code injection attacks, launch denial of service attacks, and perform password guessing and account take overs against your web facing properties. These bots commit fraud by credential stuffing, repetitively making and cancelling purchases, holding and/or consuming inventory, scraping sites to clone them, stealing information, and a host of other unwanted activities. Conversely, legitimate bot traffic is a necessary part of the Internet. Good bots are used to crawl sites on behalf of search engines for SEO optimization, scan content to ensure that it hasn’t been plagiarized, and provide real-time content such as news and weather information. Organizations want to be able to detect these good bots, while at the same time making sure they don’t negatively impact the human user experience. Having the ability to eliminate malicious bot traffic while managing legitimate bot traffic is critical to maintaining your uptime and your lines of business. TrafficDefender manages this business problem by applying machine learning and behavioural analysis to all web traffic. Customers use our practical use of behavioural science that learns from all your web traffic to provide actionable insight you can use to prevent bots, attacks and fraud, either through our console or within their infrastructure via powerful APIs. Our approach allows machines to understand and interpret the areas of uncertainty within cybersecurity. The resulting automation means there is less onus on customers to investigate as we provide actionable insight, recommendations on the best course of action, and the ability to enforce those actions based on your company goals. We are happy to discuss how we are helping leading companies in their respective sectors understand the unknown and quantify their bot threats and protect from said automated non-human traffic.