Akamai Technologies announces the acquisition of Cyberfend, a company specialized in bot and automation detection solutions for web and mobile environments. The acquisition is intended to further strengthen Akamai's existing bot management and mitigation services.
Credential theft and abuse is a significant problem for online businesses and their customers. Recent industry estimates place the number of compromised user credentials (e.g. usernames, passwords, email addresses) exfiltrated during major breaches and currently in circulation in the billions. The value of these stolen credentials can be worth as much as two to five times more than basic credit card information.
Abusing stolen credentials
Sophisticated credential abuse campaigns, which often take advantage of several different attack vectors, attempt to use these stolen credentials to log into a wide range of popular web and mobile services including commerce, financial services, travel and healthcare, among others.
Successfully detecting attacks utilizing stolen credentials can be challenging as the credentials themselves are legitimate. In addition, the attackers can hide within regular web and mobile user traffic, attack during normal service hours and distribute attacks from commonly used devices associated with millions of IP addresses across multiple geographic regions.
Spotting and stopping credential abuse
"With the introduction of Bot Manager earlier this year, Akamai helped change the way online businesses deal with the bots and other automated agents that visit their sites," explained Stuart Scholly, senior vice president and general manager, Web Security, Akamai. "The addition of Cyberfend's technology is intended to give our customers a better way to spot and stop credential abuse on their sites – benefitting both the online business and its users."
Through its acquisition of Cyberfend, Akamai plans to extend the capabilities of the Bot Manager solution by offering online businesses the technology required to effectively distinguish between real customers and attackers, and limit attackers' ability to avoid detection. Cyberfend offers machine learning-based real-time detection capabilities, which will be integrated in Bot Manager. Cyberfend is headquartered in Santa Clara, California.