📣 How DataDome Protected a Cashback Website from an Aggressive Credential Stuffing Attack 👏 For 15 hours total—11:30 a.m. on May 26 to 3 a.m. on May 27—the login endpoint of a cashback website was targeted in a credential stuffing attack. The attack included: 🔵 16.6K IP addresses making requests. 🔵 ~132 login attempts per IP address. 🔵 2,200,000 overall credential stuffing attempts. The attack was distributed with 16.6K different IP addresses, but there were some commonalities between requests: 👉 The attacker used a single user-agent. 👉 Every bot used the same accept-language. 👉 The attacker used data-center IP addresses, rather than residential proxies. 👉 The attacker made requests on only one URL: login. 👉 Bots didn’t include the DataDome cookie on any request. How was the attack blocked? ✅ Thanks to our multi-layered detection approach, the attack was blocked using different independent categories of signals. The main detection signal here was server-side fingerprinting inconsistency. The attack had a unique server-side fingerprint hash, where the accept-encoding header content was malformed due to spaces missing between each value. Get the full details: https://lnkd.in/e-VHcRxC
DataDome’s Post
More Relevant Posts
-
DataDome is on Reddit! Join our Community: r/BustingBots for discussions around today’s ever-evolving automated threat landscape, including but not limited to research, relevant news, and industry trends. Check us out: https://lnkd.in/e3SMhUzK
-
-
Compromised credential attacks use stolen information to gain illegal access to accounts, applications, and systems. What's more? ➡️ Compromised credentials are used in the majority of cyberattacks. Implementing robust security protocols, educating staff on good password hygiene, & using dedicated fraud prevention software can help to protect your data from this cyber threat. We explain more: https://lnkd.in/eHMxPkZ8
-
How does DataDome ensure our customers are safe from the potential risks #LLMs pose? Press play as our CEO & Co-founder Benjamin Fabre shares his insight on the topic:
-
Meet DataDome Account Protect's User Activity Graph 🤝 The User Activity Graph is a comprehensive map of user activity for in-depth threat analysis. It creates a holistic picture of the customer, allowing Account Protect to identify subtle anomalies indicative of fraud. With multiple layers of detection, suspicious activity cannot fly under the radar—keeping you and your users safe. 🔒 Learn how the User Activity Graph identifies specific threats and get to know its proactive approach to stopping fraud up-front in our latest article: https://lnkd.in/gUqStNMf
-
-
🎯 Highest Accuracy 💵 Pays for itself 🔒 Real-Time Protection ✅ The DataDome Platform View the full video: https://lnkd.in/ePFVcvC7
-
ICYMI, DataDome was named a Leader in The Forrester Wave™: Bot Management Software, Q3 2024! Here's a sneak peak ➡️ "Customers looking for a strong all-around bot solution that excels in ease of use should add DataDome to their shortlist.” Download the full report to learn more: https://lnkd.in/e-S3WbrN
-
-
The #BotBusters are headed to Viva Las Vegas for Black Hat USA! Visit us from August 7-8 at booth #3136, where DataDome stands at the forefront of bot and online fraud protection. 👊 🤖 Stop by our booth to test your site using our BotTester tool. ✅ Book a meeting now to speak with one of our on-site experts to discover how the DataDome platform can protect your enterprise. 🥳 Join us at the Level Up Party! Don't miss your chance to Level Up at our exclusive event with ZeroFox. Get your party on! 📝 Learn about attack tools & defenses. On Wednesday, August 7, from 3:15-3:35 p.m. in Mandalay Bay Ballroom K, DataDome’s VP of Solution and Services Mathieu Dalmau, will dive into the latest bot attack vectors and defense strategies. https://lnkd.in/evdqw5tZ
-
-
🗣️ Everything you need to know about content scraping! ⭐️ Content scraping isn’t always used for illegitimate or malicious purposes. Many companies scrape content for aggregation, market research, or comparison. ❌ However, there are unethical and illegal ways in which scraped content is used ➡️ fraudsters can use scraped content to populate spoofed websites, conduct click fraud, price scraping, or email scraping. What you can do to protect your site from malicious content scraping: - CSS can be configured to make it more difficult for scrapers to locate & extract desired content. - JavaScript can also obscure elements, making extracting data more difficult for scraper bots. - APIs can control access to data and limit the number of requests from one IP address. ✅ One of the most effective ways to combat content scraping is to use online fraud and bot protection software like DataDome.
-
Join us on August 20, 1-2 p.m. ET for an exclusive webinar where experts from AWS and DataDome will shed light on the evolving threat landscape and how to secure your business against sophisticated bot attacks and online fraud. Amazon Web Services (AWS) AWS Partners Learn more. 👇
This content isn’t available here
Access this content and more in the LinkedIn app