Akamai Page Integrity Manager Helps Enterprises Defend Against Sophisticated Magecart-Style Attacks

Akamai Technologies, Inc. (Akamai) (NASDAQ: AKAM), the intelligent edge platform for secure digital experiences, announced the launch of Page Integrity Manager. This in-browser threat detection solution is designed to discover compromised scripts that may be used to steal user data or degrade the user experience. The attack vector of malicious web page scripts, first made public by the Magecart hacker group and now widely used by other malicious actors, continues to grow and has become a common trigger for data breaches.

A typical website relies on dozens of third-party resources, many of which result in various scripts being executed in the user's browser. Third-party scripts are critical to the dynamic user experience that visitors to modern websites expect, and many of these websites contain sensitive pages for functions such as payment, account management, and forms for submitting personal information. However, security teams have little visibility into and control over these scripts provided and maintained by third parties.

To help enterprises solve the above problems, Akamai developed Page Integrity Manager. This product helps websites defend against JavaScript threats such as web data theft, form hijacking and Magecart attacks by identifying vulnerable resources, detecting suspicious behavior and blocking malicious activities. In addition, by detecting suspicious script activities in real time, Page Integrity Manager can more effectively provide strong protection when stealthy supply chain attacks (such as Magecart) occur.

“Web data theft attacks remain at a steady high volume across all industries, with retail, media, and hospitality being the most affected,” said Steve Ragan, security researcher at Akamai. “In a recent week, we analyzed nearly 5 billion Javascript executions, 110 million page views, and discovered approximately 1,000 vulnerabilities, any of which could lead to the theft of sensitive user data.”

The FBI recently reported that it has been concerned about Web theft for nearly seven years, and the number of related crimes has been increasing as cybercriminals share malware online and continue to sophisticate their attacks.

“By their very nature, web page scripts are highly dynamic. The lack of transparency into third-party scripts creates a new attack vector that is difficult to defend against,” said Sheng Li, regional vice president and general manager of Greater China at Akamai. “Page Integrity Manager provides Akamai customers with the detection capabilities they need to manage the risk of scripts – first-party, third-party, and even n-party scripts – and the actionable information they need to make business decisions based on their unique needs.”