Image courtesy of Infosecurity Magazine
Arkose Labs projected that online shoppers in the UK would face up to 8 million credential stuffing attacks per day during the 2021 Christmas period, based on company research documenting more than 2 billion such attacks between October 2020 and September 2021 — a 98% year-over-year increase. The analysis found credential stuffing accounted for 5% of all online traffic in the first half of 2021, an astonishing share that reflects the easy availability of breached password databases on the dark web. Arkose Labs noted that the attack vector rose 56% during the prior year's Christmas period, establishing a troubling seasonal trend for retailers and consumers alike.
