Akamai Diversity

Akamai Security Intelligence
& Threat Research

Or Katz

Or Katz

May 24, 2019 8:00 AM

Disturbingly Easy Phishing Attack Development

While speaking to a colleague of mine regarding recent work on Akamai's Enterprise Threat Protector (ETP) Research Team, related to phishing detection and mitigation, we discussed a recent phishing campaign targeting Microsoft users that leveraged free HTML hosting services and how easy it has become to build and deliver phishing website.

Amiram Cohen

Amiram Cohen

May 21, 2019 8:00 AM

16Shop: Commercial Phishing Kit Has A Hidden Backdoo ...

Additional research by Or Katz When it comes to targeting Apple users and their personal and financial data, 16Shop has emerged as a go to kit for those who can afford it. While 16Shop is sold to criminals looking to collect sensitive information from a targeted subset of the Internet community, at least one pirated version circulating online houses a backdoor that siphons off the data harvested and delivers it

Threat Research Team

Threat Research Team

May 15, 2019 8:00 AM

Bots Tampering with TLS to Avoid Detection

Researchers at Akamai observed attackers using a novel approach for evading detection. This new technique - which we call Cipher Stunting - has become a growing threat, with its roots tracing back to early-2018. By using advanced methods, attackers are randomizing SSL/TLS signatures in an attempt to evade detection attempts.

Yael Daihes

Yael Daihes

April 10, 2019 8:00 AM

Does DNS Data Really Matter?

Real-world data on how adding DNS data to a deep learning model increases its effectiveness By Yael Daihes & Craig Sprosts These days, big data and machine learning are topics of frequent discussion within the security community. While the idea that machine learning algorithms prosper with access to more data is hardly a revelation, we wanted to dig deeper and conduct an experiment using global DNS traffic. More specifically, how

Larry Cashdollar

Larry Cashdollar

April 1, 2019 10:09 AM

SIRT Advisory: Multiple Vulnerabilities in Magento

Summary Magento users should patch their systems to the fixed versions 2.3.1, 2.2.8 and 2.1.17 immediately due to multiple severe vulnerabilities disclosed in Magento on March 26, 2019.

Jonathan Respeto

Jonathan Respeto

March 20, 2019 7:00 AM

Continuous Training with CTF's

Akamai Engineering Culture Akamai is an environment fueled by the desire to learn and improve. There are open engineering and training courses, wikis, live training sessions, as well as engineer lead lecture series. Most importantly there is a strong culture around continued personal and professional development. The Security Operations Control Center (SOCC), for example, has a continuous training program where team members are given a full day, every week, dedicated

Amanda Fakhreddine

Amanda Fakhreddine

February 27, 2019 6:30 AM

State of the Internet Volume 5, Issue 2

It's the most wonderful time of the security year - it's almost RSA week! If the world is coming together to talk about security next week, we figured we should join the conversation with our latest State of the Internet report. Joining the conversation is a big part of security departments these days, as we move away from being perceived as a "department of no" to really being seen as

Larry Cashdollar

Larry Cashdollar

February 5, 2019 1:58 PM

Phishing Attacks Against Facebook / Google via Googl ...

When it comes to phishing, criminals put a lot of effort into making their attacks look legitimate, while putting pressure on their victims to take action. In today's post, we're going to examine a recent phishing attempt against me personally. This is an interesting attack, as it uses Google Translate, and targets multiple accounts in one go.

Amanda Fakhreddine

Amanda Fakhreddine

January 30, 2019 9:00 AM

State of the Internet, Volume 5, Issue 1

Is it too late to still say "Happy New Year?" We don't think so. We're kicking off 2019 with our first issue of the State of the Internet / Security.