Account Takeover (ATO) is a type of identity theft where a cybercriminal uses bots to obtain online access to a victim’s account at a bank, e-commerce store, gaming portal, or at other sites for the purpose of theft and financial gain. Two common techniques are used for ATO: ‘Credential Stuffing’, which exploits the fact that many internet users often reuse the same username and password at multiple websites. Bots can rapidly and automatically test lists of log-in credentials that were obtained through data dumps of breached and stolen credentials. The other technique is ‘Credential Cracking’, also known as ‘brute forcing.’ This method uses bots to test and identify valid log-in credentials by automatically entering different usernames and passwords in the hope of ‘cracking’ them through large numbers of guesses.

Radware Bot Manager leverages advanced Intent-based Deep Behavior Analysis (IDBA) and machine learning technologies to analyse every log-in attempt on a website or application in real-time, and only allows access to legitimate account holders while ensuring a minimal number of false positives. Radware Bot Manager prevents bad bots from carrying out ATO and other types of harmful attacks that lead to theft and misuse of PII and protects enterprises across industries from negative impact to their revenue while enhancing brand loyalty and customer trust.

GET A FREE TRIAL