eCommerce & Retail

How do bad actors target retail and e-commerce businesses?

Retail and eCommerce businesses have a lot to deal with when it comes to defending their business from bad actors. Vendor and login endpoints, 2FA, proper defense integration, fraud detection mitigation, and more.

These are the most targeted attack surfaces:

• Login: Companies have been looking for ways to retain and grow customer bases, this has made customer accounts a prime target for bad actors.

Credential Stuffing

When bots use customer passwords and login credentials from Dataleaks to find accounts

Account Takeover

Bad actors will utilize credential-stuffing attacks to access customer accounts. They will steal personal information, use loyalty rewards, and make unauthorized purchases. Successfully breached accounts are then sold to bad customers, costing retailers millions in losses.

• Checkout: Products are usually the target of most retail and ecommerce business, and thus the actual process of checking out a product is a big target. whether its scaling bots trying to hoard inventory, bad actors attempting to crack gift cards to get products for free, or them conducting carding attacks using stolen credit card information to get products for free. All hurt a company.

Scalping Bots

Automated bots are deployed to acquire limited quantities of items during flash sales. These include: sneakers, concert tickets, and collectibles making it virtually impossible for real customers to purchase.

Giftcard Cracking

A form of fraud used by bad actors to brute force gift card numbers. Using sophisticated checkers randomly test variations of numbers to find ones with active balances. These balances are then sorted and sold to bad customers for a fraction of the cost.

Carding Attacks

Using stolen credit card information to make fraudulent purchases online. Attackers obtain credit card details through various means, such as data breaches, phishing, or skimming devices. Leaving businesses with a chargeback and issues with the credit card issuer.

Effects of automated retail & e-commerce threats?

The damage will start to become more noticeable as time goes on, and the bigger target your organization becomes.

• Brand reputation decreases

• Customers get frustrated

• Infrastructure costs increase

Alone these might be manageable, but together they put your organization's brand in serious risk of damage.

How Fractal Security defeats these threats?

Current bot defense solutions haven't changed very much in the last 5 years. Because of this sophisticated attackers have methods to stay hidden and/or bypass all current bot defense solutions. This has put retail and eCommerce organizations in serious danger, and the damage is beginning to get noticed.

At Fractal Security we've tracked the exchange of over 5,000,000 breached customer accounts of the most popular retail brands over the last 30 days. The value of these accounts purely from a rewards balance is over $25m. This is a massive financial toll that Fractal Security aims to fix.

Deploying Fractal Bot Defense stops adversaries from performing unsolicited requests on log-in pages. Using proprietary AI-powered Dynamic Obfuscation that creates unique challenges every visit, preventing retooling.

Paired with Fractal Threat Recon, all current and future exploits will be detected and reported to your internal security team. Get real-time data on your customer's account health and the company's security posture.