New Report Series Highlights E-Commerce Threats, Fraud Against Retailers

  • Oct 30, 2024

Trustwave, a cybersecurity and managed security services provider, recently released a series of reports detailing the threats facing the retail sector, marking the second year of its ongoing research into these critical security issues.

In its annual research, Trustwave SpiderLabs highlights the unique factors at play in retail, significant trends currently affecting the industry, including ransomware, shifts in compliance, and the rise of e-commerce, and provides an overview of threat actor techniques by attack stage.

Additionally, Trustwave SpiderLabs has produced two complementary in-depth write-ups on pressing threats in the sector: e-commerce threats and risks, and fraud targeting retailers. Trustwave SpiderLabs’ analysis delves into why these threats are particularly pervasive in the retail vertical, providing retailers with a clearer understanding of the landscape and effective strategies to mitigate risks.

"As we enter the holiday shopping season, the rise in e-commerce threats and the alarming trends in cyber fraud underscore the need for heightened vigilance in protecting consumer data,” said Trustwave CISO Kory Daniels. “A single incident can undermine customer trust and lead to long-term financial impacts, making robust cybersecurity measures not just a necessity but a critical component of sustainable business practices in today’s retail landscape. By prioritizing security, we not only protect our customers but also foster trust, ensuring a secure and enjoyable experience this holiday season."

Cybersecurity in the retail sector is particularly challenging due to the increasing complexity of IT environments, which often encompass in-store systems, online platforms, and supply chain networks. Retailers also face a unique threat landscape due to seasonal fluctuations, third-party dependencies, physical security risks, and franchise models.

Key findings from Trustwave SpiderLabs’ retail research series include:

  • 58% of attacks originated from phishing
  • 47% of stolen user sessions leverage Amazon domains
  • 92% of credential access techniques were brute-force attempts
  • 15% of ransomware attacks were conducted by Play and LockBit
  • 62% of ransomware attacks were in the US
  • 16% of ransomware attacks targeted Food & Beverage retailers

In 2023, Trustwave released its first Retail Threat Intelligence Briefing that analyzed the attack flow specific to the retail sector, offering insight on specific threat actors, actionable intelligence, and recommended mitigations for each stage.

To access this year’s research, please click here for the full retail threat research series.

Featured

  • The Evolution of IP Camera Intelligence

    As the 30th anniversary of the IP camera approaches in 2026, it is worth reflecting on how far we have come. The first network camera, launched in 1996, delivered one frame every 17 seconds—not impressive by today’s standards, but groundbreaking at the time. It did something that no analog system could: transmit video over a standard IP network. Read Now

  • From Surveillance to Intelligence

    Years ago, it would have been significantly more expensive to run an analytic like that — requiring a custom-built solution with burdensome infrastructure demands — but modern edge devices have made it accessible to everyone. It also saves time, which is a critical factor if a missing child is involved. Video compression technology has played a critical role as well. Over the years, significant advancements have been made in video coding standards — including H.263, MPEG formats, and H.264—alongside compression optimization technologies developed by IP video manufacturers to improve efficiency without sacrificing quality. The open-source AV1 codec developed by the Alliance for Open Media—a consortium including Google, Netflix, Microsoft, Amazon and others — is already the preferred decoder for cloud-based applications, and is quickly becoming the standard for video compression of all types. Read Now

  • Cost: Reactive vs. Proactive Security

    Security breaches often happen despite the availability of tools to prevent them. To combat this problem, the industry is shifting from reactive correction to proactive protection. This article will examine why so many security leaders have realized they must “lead before the breach” – not after. Read Now

  • Achieving Clear Audio

    In today’s ever-changing world of security and risk management, effective communication via an intercom and door entry communication system is a critical communication tool to keep a facility’s staff, visitors and vendors safe. Read Now

  • Beyond Apps: Access Control for Today’s Residents

    The modern resident lives in an app-saturated world. From banking to grocery delivery, fitness tracking to ridesharing, nearly every service demands another download. But when it comes to accessing the place you live, most people do not want to clutter their phone with yet another app, especially if its only purpose is to open a door. Read Now

Most   Popular

New Products

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.