Report by Arkose Labs
A Data-Driven Analysis of Threat Actor Behavior
Key Findings
A single bad actor targeting just 5 gaming platforms with account takeover scams can pocket an average of US$145,176.
The top countries of origin of attacks are the United States, Vietnam, Great Britain, Germany, and Thailand.
A 48% spike in sign-up attacks occurred in the third quarter of 2024, aligning with major events like the Super Bowl and U.S. elections.
In El Salvador, threat actors make 20x more targeting gaming companies compared to those working as software developers.
The top three attack points used are account sign-up, sign-in, and account management
Five of the most targeted industries are technology, social media, gaming, retail, and fintech.
During the busy holiday shopping season in the fourth quarter of 2024, sign-up attacks jumped 309%.