Financial Sector Sees Major Spike in Mobile Cyberattacks, Report Says
A new look at cybercrime trends throughout the world shows that the financial industry experienced a 37 percent increase in takeover attacks during the second half of 2018, and a whopping 107 percent spike when looking at fraudsters' attempts to gain control of user accounts during mobile transactions.
March 05, 2019 at 02:54 PM
4 minute read
During the second half of 2018, the financial services industry saw a more than 100 percent increase in cyberattacks occurring during mobile account logins, when criminals attempt to infiltrate users' accounts, according to a report from LexisNexis risk solutions company ThreatMetrix.
The H2 2018 Cybercrime Report released Tuesday draws global statistics from cyberattacks that the ThreatMetrix network detected between July and December. During that time, the company processed 17 billion transactions, 61 percent of which originated from mobile devices.
In those same six months, there were 244 million human-initiated attacks and 3 billion automated or bot attacks—189 million of those were mobile attacks, a 12 percent increase over the first half of 2018.
The financial sector appears to be bearing the brunt of attacks in which cybercriminals try to take over user accounts. While the rate of such incidents dipped globally by nearly 50 percent, the financial industry experienced a 37 percent increase in takeover attacks and a whopping 107 percent spike when looking at fraudsters' attempts to gain control of user accounts during mobile transactions.
The report notes that “financial services organizations continue to walk the tightrope between maintaining robust security with a low friction, streamlined customer experience, while at the same time managing the sometimes competing demands of privacy and regulatory reform.”
Thomas Brown, senior vice president of U.S. commercial markets and global market development for LexisNexis Risk Solutions, said in the report that businesses need to implement a “layered defense of fraud, identity and authentication capabilities, including both digital and physical data, across the entire customer journey,” to thwart fraudsters.
While account takeovers are a significant concern, the use of stolen personal information to create fraudulent accounts for loans, insurance policies or credit cards, for instance, continues to pose an even greater risk for more businesses.
Latin America, with its rapidly growing economy, is emerging as a “hotbed of new account creation fraud,” according to the report. The issue is also a big problem in India, where “almost one in every four new account creation transactions … is an attack, the highest of any region globally,” the report found.
While the highest volumes of cyberattacks typically originate out of the U.S. and U.K., according to LexisNexis data, the report revealed a growing number of attacks coming from Canada, Columbia, Ukraine, South Africa and Ghana.
“This reality serves to highlight the widespread and pernicious impact of breached identity data,” according to the report.
And the same cybercriminals appear to be working together in a “strong networked pattern of fraud” that targets multiple industries throughout the world, which illustrates the “global and ever-more connected nature of online fraud,” the report states.
Some other noteworthy findings:
- In Japan, there was a 326 percent increase in attempted account takeovers through mobile logins during the second half of 2018. And France's attack rate on login transactions experienced a 199 percent year-on-year increase.
- As mobile fraud evolves mobile bot attacks are increasing. There were 189 million such attacks during the last six months of 2018, a 12 percent increase over the first half of the year.
- Bot attacks also are becoming the bane of the e-commerce world, according to ThreatMetrix. The company says it detected and stopped 2.1 billion bot attacks on online merchants, a growth of 142 percent compared to the same six-month period during the prior year.
Read More:
This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.
To view this content, please continue to their sites.
Not a Lexis Subscriber?
Subscribe Now
Not a Bloomberg Law Subscriber?
Subscribe Now
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
You Might Like
View AllHow Amy Harris Leverages Diversity to Give UMB Financial a Competitive Edge
5 minute readDog Gone It, Target: Provider of Retailer's Mascot Dog Sues Over Contract Cancellation
4 minute readLululemon Faces Legal Fire Over Its DEI Program After Bias Complaints Surface
3 minute readGC Conference Takeaways: Picking AI Vendors 'a Bit of a Crap Shoot,' Beware of Internal Investigation 'Scope Creep'
8 minute readTrending Stories
- 1'It Refreshes Me': King & Spalding Privacy Leader Doubles as Equestrian Champ
- 2Class Action Filed Against Houston Health Savings Account Firm for Allegedly Confiscating Client Funds
- 3These 2 Lawyers Just Became Florida Judges
- 4'Disease-Causing Bacteria': Colgate and Tom’s of Maine Face Toothpaste Class Action
- 5Trump's SEC Overhaul: What It Means for Big Law Capital Markets, Crypto Work
Who Got The Work
Michael G. Bongiorno, Andrew Scott Dulberg and Elizabeth E. Driscoll from Wilmer Cutler Pickering Hale and Dorr have stepped in to represent Symbotic Inc., an A.I.-enabled technology platform that focuses on increasing supply chain efficiency, and other defendants in a pending shareholder derivative lawsuit. The case, filed Oct. 2 in Massachusetts District Court by the Brown Law Firm on behalf of Stephen Austen, accuses certain officers and directors of misleading investors in regard to Symbotic's potential for margin growth by failing to disclose that the company was not equipped to timely deploy its systems or manage expenses through project delays. The case, assigned to U.S. District Judge Nathaniel M. Gorton, is 1:24-cv-12522, Austen v. Cohen et al.
Who Got The Work
Edmund Polubinski and Marie Killmond of Davis Polk & Wardwell have entered appearances for data platform software development company MongoDB and other defendants in a pending shareholder derivative lawsuit. The action, filed Oct. 7 in New York Southern District Court by the Brown Law Firm, accuses the company's directors and/or officers of falsely expressing confidence in the company’s restructuring of its sales incentive plan and downplaying the severity of decreases in its upfront commitments. The case is 1:24-cv-07594, Roy v. Ittycheria et al.
Who Got The Work
Amy O. Bruchs and Kurt F. Ellison of Michael Best & Friedrich have entered appearances for Epic Systems Corp. in a pending employment discrimination lawsuit. The suit was filed Sept. 7 in Wisconsin Western District Court by Levine Eisberner LLC and Siri & Glimstad on behalf of a project manager who claims that he was wrongfully terminated after applying for a religious exemption to the defendant's COVID-19 vaccine mandate. The case, assigned to U.S. Magistrate Judge Anita Marie Boor, is 3:24-cv-00630, Secker, Nathan v. Epic Systems Corporation.
Who Got The Work
David X. Sullivan, Thomas J. Finn and Gregory A. Hall from McCarter & English have entered appearances for Sunrun Installation Services in a pending civil rights lawsuit. The complaint was filed Sept. 4 in Connecticut District Court by attorney Robert M. Berke on behalf of former employee George Edward Steins, who was arrested and charged with employing an unregistered home improvement salesperson. The complaint alleges that had Sunrun informed the Connecticut Department of Consumer Protection that the plaintiff's employment had ended in 2017 and that he no longer held Sunrun's home improvement contractor license, he would not have been hit with charges, which were dismissed in May 2024. The case, assigned to U.S. District Judge Jeffrey A. Meyer, is 3:24-cv-01423, Steins v. Sunrun, Inc. et al.
Who Got The Work
Greenberg Traurig shareholder Joshua L. Raskin has entered an appearance for boohoo.com UK Ltd. in a pending patent infringement lawsuit. The suit, filed Sept. 3 in Texas Eastern District Court by Rozier Hardt McDonough on behalf of Alto Dynamics, asserts five patents related to an online shopping platform. The case, assigned to U.S. District Judge Rodney Gilstrap, is 2:24-cv-00719, Alto Dynamics, LLC v. boohoo.com UK Limited.
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250