Business Daily Media

Okta Study Finds Fraudulent Registrations and Credential Stuffing to be Top Threats to Digital Identities

Robust and resilient Customer Identity and Access Management (CIAM) exists at the vanguard of identity security

SINGAPORE - Media OutReach - 1 February 2023 - Okta, Inc. (NASDAQ: OKTA), the leading independent identity provider, today unveiled the APAC findings of its second annual State of Secure Identity Report highlighting key areas of concern for security professionals tasked with managing digital identities, including the exponential rise of fraudulent registration, credential stuffing attacks, and the widespread use of breached credentials.

Based on the data across the world from Okta Customer Identity Cloud, powered by Auth0, this report presents trends, examples, and real-world observations from the billions of identity attacks at various authentications touchpoints.

Research into these Okta global customers found the following key facts and figures:

  1. Fraudulent registrations are an ever-present and growing threat: In the first 90 days of 2022, Okta observed almost 300 million fraudulent account creation attempts, accounting for about 23% of signup attempts, up from 15% in the same period last year. Energy/Utilities and Financial Services experienced the highest proportion of signup attacks, with such threats accounting for most of the registration attempts in those two industries.
  2. Credential stuffing is on a record pace: Credential stuffing attacks are the most common threats to Retail/eCommerce (more than 80% login activity), Financial Services and Entertainment verticals. In the first 90 days of 2022, the platform detected almost 10 billion credential stuffing events, representing some 34% of overall traffic or authentication events. In Southeast Asia, which was buoyed by several large-scale attacks, credential stuffing accounts for the majority of identity events. The situation in Australia and New Zealand was more sanguine — normal traffic represents the majority of login events (63%), and only during a large attack does credential stuffing overtake legitimate traffic.
  3. Threat actors are targeting multi-factor authentication (MFA): In Asia Pacific, MFA bypass attacks are responsible for more events than signup attacks. Because of its proven merits, more application and service providers are recommending or requiring MFA. As attackers become more sophisticated at targeting this important defensive measure, it's critical that MFA be implemented correctly and that strong secondary factors are chosen.
  4. Every company faces unique challenges. The threats facing any particular application or service vary enormously by geography, industry, and brand prominence, among other factors. At the same time, different organizations have different risk appetites and exposures. The appropriate level of friction introduced by security measures will therefore vary on a company-to-company basis.
"Digital transformation will continue to be high on the priority list for many organizations, and a reliable CIAM could help businesses combat account takeover to protect consumers and businesses while boosting seamless consumer experience," said Ben Goodman, Senior Vice President and General Manager for Asia Pacific & Japan, Okta. "The first step towards implementing CIAM securely is to understand why and how adversaries are attacking these customer-oriented businesses," he added.

Applications gain users, identity takes on even greater Importance

As adversaries focus greater attention on attacking identity systems and evolving their tactics, techniques, and procedures (TTPs), the report highlighted that it is essential for application and service providers to:
  • Implement defence-in-depth tools that work in combination across the user, application, and network layers
  • Continually monitor their applications for signs of attacks and changes in TTPs; and
  • Make adjustments (e.g., tune parameters, tighten restrictions, introduce new tools, etc.) as needed.
Leaders across these functions should work together to implement CIAM in a manner that balances quality of customer experience and system security, in the context of desired use cases, customer types, data types, industry-specific risks, and risk appetite.

"Trust between customers and organizations is sacred and hard-earned, therefore it is crucial to make identity security a board-level issue. Placing identity security at the core of your business will allow your workers to focus on innovation, collaboration, and productivity while reducing overall identity-related risk," Goodman added.

Managing CIAM Threats

The report also highlighted that an agile, secure-by-design CIAM solution permits a considerable amount of flexibility that allow organizations to tailor customer identity and access management — and continually tune as needed — without drawing in resources better applied toward advancing core competencies.

The report recommends several solutions that involve combining multiple security tools that can operate at different layers and form a unified defensive position. These include implementing MFA, using generic failure messages that do not reveal system details, limiting failed login attempts, and implementing secure session management practices.

About The State of Secure Identity Report

This report is based on data from Okta customers around the world using Okta Customer Identity Cloud, powered by Auth0. As a result, it represents real-world observations of identity attacks. The data was retrieved by Okta security researchers by running simple and anonymous queries against our aggregate database of operational telemetry. Industry segmentations are based upon each customer's self-reported segment. Observations are from the first 90 days of 2022 unless otherwise noted. Okta's 2022 State of Secure Identity Report can be downloaded here.

Hashtag: #Okta

The issuer is solely responsible for the content of this announcement.

About Okta

Okta is the World's Identity Company. As the leading independent Identity partner, we free everyone to safely use any technology—anywhere, on any device or app. The most trusted brands trust Okta to enable secure access, authentication, and automation. With flexibility and neutrality at the core of our Okta Workforce Identity and Customer Identity Clouds, business leaders and developers can focus on innovation and accelerate digital transformation, thanks to customizable solutions and more than 7,000 pre-built integrations. We're building a world where Identity belongs to you. Learn more at okta.com.

News from Asia

Vedanta Group Plans ~$500 million Investment in AvanStrate Inc. to Drive Innovation in High-Tech Display Glass Products

SINGAPORE / MUMBAI, INDIA - Media OutReach Newswire - 11 November 2024 - Vedanta Limited is planning to invest close to $500 million in its group company, AvanStrate Inc. (ASI), a leading global d...

CLP Power and DNMC Support Student Visits to Daya Bay Nuclear Power Station as Part of Hong Kong Education Bureau’s Mainland Study Tours of the Subject of Citizenship and Social Development

HONG KONG SAR - Media OutReach Newswire - 11 November 2024 - CLP Power Hong Kong Limited (CLP Power) and Daya Bay Nuclear Power Operations and Management Co., Ltd. (DNMC) fully support the Mainlan...

Glorious Program kindles rural prosperity after 30 years since its establishment with close to 1500 projects

BEIJING, CHINA - Media OutReach Newswire - 11 November 2024 - On April 23, 1994, ten private entrepreneurs issued a call to action: "Let's dedicate ourselves to the noble mission of poverty allevi...

Gaw Capital Partners Ranks 3rd in PERE's 2024 Proptech 20

HONG KONG SAR - Media OutReach Newswire - 11 November 2024 - Gaw Capital Partners ranked third in the PERE's 2024 Proptech 20 among all fund managers globally, with US$1,293m raised over the past ...

eftPay Entered in a MOU with AXS

Revolutionizing Payment Processing Across Asia Pacific Markets HONG KONG SAR - Media OutReach Newswire - 11 November 2024 - eft Payments (Asia) Limited ("eftPay" or the "Company"), one of the lea...

OPPO Find X8 Series with ColorOS 15 to Launch Globally, Setting a New Standard for Flagship Smartphones

SHENZHEN, CHINA - Media OutReach Newswire – 11 November 2024 - OPPO, the world's leading smart device brand will launch Find X8 Series and ColorOS 15 at a global launch event, set to take place o...

Galaxy Macau™ Presents Tatler Off Menu Dazzles with 15 International Masters of Gastronomy

Crafting an Unforgettable Celebration MACAU SAR - Media OutReach Newswire - 11 November 2024 - Galaxy Macau™ Presents Tatler Off Menu took place from November 8 to 10 at the Galaxy Macau™ Cabana a...

12 Years of Success: JustMarkets’ Brightest Highlights

CAPE TOWN, SOUTH AFRICA - Media OutReach Newswire - 12 November 2024 - With 12 years of reliability, safety, and trust under its belt, JustMarkets has earned a leading place in the industry...

International Business Forum "World of Opportunities: RussiaASEAN" to be Held in Malaysia

KUALA LUMPUR, MALAYSIA - Media OutReach Newswire - 12 November 2024 – Kuala Lumpur will host the "World of Opportunities: Russia-ASEAN" International Business Forum on November 26-27, bringin...

University of Macau Welcomes Distinguished Scholars, Boosting Its Commitment to Academic Excellence

MACAU SAR - Media OutReach Newswire - 12 November 2024 - With its growing international reputation and influence, the University of Macau (UM) has attracted several eminent scholars from various f...

How to Build Business Credit Fast Using Net 30 Accounts

Building strong business credit is like building a skyscraper-it takes a solid foundation and careful construction. Unlike a skyscraper, however, ...

Business Training

Is Bark.com a scam

On 14 August 2024 we received an email from Bark.com. Foolishly one of our team members thought that it was genuine and from a local Australian busine...

Business Training

Unlock Your Dream Home With the Best Cowra Home Builders

Cowra is a charming small town in New South Wales, Australia. It is known for its rich agricultural and cultural heritage, and for its vibrant loc...

Property

More training for coffee making than property sales: REINSW

Sydney 9 May 2016. An overhaul of education and training standards for the real estate profession must take place to help prevent illegal activities, ...

Business Training

How Successful Businesses Make a Good Impression on Customers

For a business to go from being barely profitable to highly successful, it has to do a number of things right. No business stumbles upon long term...

Business Training

Tips for Keeping Your Business OSHA Compliant

As a business owner, you are legally and morally responsible for your employee's safety and wellness. OSHA sets standards and regulations that bus...

Business Training