Gaming industry witness cyber-attacks crosses 12 billion in 17 months
A report from the cyber security vendor Akamai says, a total of 55 billion credential stuffing attacks across all industries. Further, Akamai 2019 State of the Internet / Security Web Attacks and Gaming Abuse Report, hackers have targeted the gaming industry by carrying out 12 billion credential stuffing attacks against gaming websites within the 17-month period analyzed in the report (November 2017 – March 2019).
This puts the gaming community among the fastest rising targets for credential stuffing attacks and one of the most lucrative targets for criminals looking to make a quick profit. During the same time period.
The report also reveals that SQL Injection (SQLi) attacks now represent nearly two-thirds (65.1%) of all web application attacks, with Local File Inclusion (LFI) attacks accounting for 24.7%. The report’s data shows that SQLi attacks have continued to grow at an alarming rate as an attack vector, with a spike in activity during the 2018 holiday shopping season and a continued elevated trend since that time. In the first quarter of 2017, SQLi attacks accounted for 44% of all application layer attacks.
The bridge between SQLi and credential stuffing attacks is almost a direct line. The majority of the credential stuffing lists circulating on the darknet and on various forums use data that originated from some of the world’s largest data breaches, and many of them have SQLi as a root cause.
In fact, earlier this year Akamai researchers discovered a video where viewers were instructed on how to conduct SQLi attacks against vulnerable websites, and then use the credentials obtained to generate lists that can be leveraged in credential stuffing attacks against a popular online game.
"One reason that we believe the gaming industry is an attractive target for hackers is that criminals can easily exchange in-game items for profit," Martin McKeay, Security Researcher, Akamai, said in a statement. “Furthermore, gamers are a niche demographic known for spending money, so their financial status is also a tempting target.”
In one example of these attacks, criminals target popular games looking for valid accounts and unique skins, which are used to change the appearance of an item in a video game. Once a player’s account is successfully hacked, it can then be traded or sold. The report says, Nearly 67% of application layer attacks target organizations based in the United States. Russia is the second largest source of application attacks, but nowhere to be found in the top 10 target countries while China is ranked as the fourth highest source country, but not among the top 10 target countries.
The United Kingdom is the second highest targeted country, but only tenth on the source country list. Japan, Canada, Australia and Italy are all also among the countries most targeted, but not on the top 10 source list. Whereas, the United States is overwhelmingly the top source country for credential stuffing attacks across all verticals, Russia and Canada take the top two spots targeting the gaming sector.
See What’s Next in Tech With the Fast Forward Newsletter
Tweets From @varindiamag
Nothing to see here - yet
When they Tweet, their Tweets will show up here.