LexisNexis Risk Solutions has released at the Digital Identity Summit its Cybercrime Report providing a comprehensive view into the shifting global fraud landscape from January 2019 through June 2019. During this period, the LexisNexis Digital Identity Network recorded 16.4 billion transactions, of which 277 million were human-initiated attacks, a 13 per cent increase over the second half of 2018.
The report highlights a shift toward networked, cross-organisational and cross-industry fraud, and gives insight into the evolution of bot attacks targeting new accounts in media and e-commerce.
Key Findings from the LexisNexis Risk Solutions Cybercrime Report:
Networked Cybercrime – Cybercrime networks emerge when digital identities are associated with confirmed fraud attempts across more than one organisation in the Digital Identity Network. organisations within the same industry, particularly banking, lending and stock brokerage, are most acutely affected.
The new report details an example of how the Digital Identity Network tracked one fraudster across three industries and six different organisations (several financial services organisations, a media streaming company and a credit reporting agency) as the fraudster attempted to create new accounts, initiate repeated login attempts and make fraudulent payments in an effort to monetize stolen credentials, launder money and abuse bonus incentives.
Bot Attacks – Fraudsters have shifted bot attacks to target new account creation transactions, which is the only transaction use case which recorded a growth in attacks during the first half of the year. Fraudsters are using these new account creation attempts to test, validate and build online identities for financial gain.
Within media, for example, bot attacks targeting new account creations saw a 65 per cent increase in just six months; The Digital Identity Network revealed a number of bonus abuse attempts where fraudsters attempted to sign up for a number of new accounts in order to capitalize on free trials and streaming bonuses to sell for profit.
E-commerce companies also saw bot attacks on new account creations increase 305 per cent and were most prevalent in online marketplaces, virtual gift card companies and ridesharing sites.
Mobile App Registration – While mobile continues to prove more secure than desktop, fraudsters are seeing new mobile account creations and app registrations as opportunities to intercept one-time passcodes to fraudulently register mobile apps. This provides fraudsters with a wealth of personal information and bank account access.
Globally, attacks on mobile apps rose 148 per cent in six months and are skewed towards media organisations, particularly social media and gaming/gambling organisations, where bad actors register for new player bonuses to sell for profit.
"Fraudsters no longer operate in silos, they are attacking across industries and organisations," said Rebekah Moody, director of fraud and identity at LexisNexis Risk Solutions. "As seen by a detailed example in the report, one fraudster can carry out a large number of transactions against a series of global organisations using a single mobile device.
"In the end, corporations benefit the most when fraud defence platforms include a multilayered approach that comprise digital identity intelligence, physical identity and authentication capabilities," continued Moody. "This approach, when executable in near real-time and touching the entire customer journey, extends beyond detecting complex fraud – it also allows for more streamlined regulatory compliance processes and reduces friction across the customer experience."
Varonis Blog Highlights 110 Cybersecurity Statistics
Cybersecurity company Varonis has issued its predictions for the forthcoming year with a blog post entitled 110 Cybersecurity Statics For 2020. The blog states that cybersecurity issues are becoming a day-to-day struggle for businesses. Recent trends and cybersecurity statistics reveal a huge increase in hacked and breached data from sources that are increasingly common in the workplace, like mobile and IoT devices.read more
UK To Go On The Cyber Offensive
The UK Government is about to launch a new proactive and offensive cybersecurity team that will wage cyberwarfare against hostile nation-states and online crime organisations. It would be naive to believe that the UK has not launched cyberattacks against third parties, but the killing of Qassem Soleimani has brought this out into the open.read more
Are You Ready For Iranian Revenge Cyberattacks?
Following the killing of Qassem Suleimani no-one can be sure of what military action Iran will take, but experts agree that its cyberattacks will increase against countries and governments it sees as hostile.read more
Ringing The Changes For IOT Security
Buying and installing a cyber-doorbell through which you can monitor callers even if you are away from home makes sense, yes? Not unless you are a user from Alabama who has launched a $5million legal against action after it is alleged that a hacker cracked the Ring doorbell and started harassing the family.read more