From the report: “The retail, travel, and hospitality industries were deeply impacted by the COVID-19 pandemic. … Criminals seized the moment and started targeting the retail, travel, and hospitality sectors with attacks of all types and sizes. Between July 2018 and June 2020, Akamai observed more than 100 billion credential stuffing attacks, and more than 63 billion of them targeted retail, travel, and hospitality.”
As a greater number of people started working from home with pandemic lockdowns in place, cybercriminals began targeting industries with password combination lists. These threat actors also began circulating previous credential lists with the hopes of identifying “new vulnerable accounts,” according to the report.
The report recommended keeping customers safe by implementing complex, long passwords and multi-factor authentication. Click this link to read the entire report.
Password Tips to Prevent Credential Stuffing
Below are several tips from a recent Hikvision blog to reduce your risk of becoming a victim to credential stuffing.
- Never reuse passwords. Reusing passwords greatly increases the chances that your account will be compromised with a credential stuffing attack.
- Enable multi-factor authentication (MFA) everywhere you can. This will protect your account even if an attacker gets your password. MFA adds two or more pieces of verifiable evidence or factors to the authentication process to greatly reduce security concerns by lowering the chances of an account being accessed by the wrong person.
- Use a Password Manager. Using a password manager will relieve you of the burden of remembering all your passwords because you can store them in the password manager.
By creating strong passwords and using certain tools, you can reduce your risk of hack related to credential stuffing and other cyberthreats. For more on cybersecurity from Hikvision, click here.