With Black Friday fast approaching, retailers need to take the right steps to ensure their websites are safeguarded from potential attacks to customer data.
Security expert comments are below on the three tools every retailer should invest in before Black Friday to ensure they and their customers are safe from cybercrime.
As the biggest day of the year for online shopping arrives, malicious attackers are using online retail websites as a hotbed to exploit customer data.
“This Black Friday, retailers need to take action to protect both their websites and their customers. With Brits now spending more money on their mobile phones than in every shopping centre in Britain combined, more needs to be done to ensure personal information is protected.
“Unique to e-commerce is gift card fraud. Scammers use bots to test millions of combinations of gift card numbers on retail websites. Once the gift card number is validated as having a balance, that number can be used to buy goods and the balance stolen. Both account takeover and gift card abuse shakes the confidence of the customer so much that many will no longer use the e-commerce site.
There are three tools retailers should invest in to help reduce the likelihood of these attacks:
1. Install a bot management solution which collects and analyses bot traffic to pinpoint anomalies in your system
2. Intrusion prevention systems and a web application firewall should be used to minimise the likelihood that a hacker can exploit a vulnerable website.
3. DDoS (distributed denial of service) attack prevention should be used to decrease the likelihood of an attack for ransom during this time of the year. Any investment in a DDoS mitigation solution should be accompanied by a DDoS attack plan or playbook such that in the event of a DDoS attack all parts of the organisation do what’s necessary to minimise the effects of an attack
“It is paramount to not wait until the last minute to safeguard your website. The time is now to test your security, before consumers come flooding in and before attackers monetise on data.”