I Joined Adobe and the Identity team 7 years ago. A few months after joining, the Security Squad was formed and I was one of its first members. During my tenure in Security Squad I have contributed to various projects aiming at improving the security of Adobe Users’ accounts such as SMS-based Second Factor Authentication, Login Flow Risk Assessment and User Session Management.

A cure for Botnets? Fighting Credential Stuffing at Adobe

Gone are the days when cybercrime required rigorous training and serious funding. Nowadays anyone with as little as 9$ can rent a botnet and launch a Credential Stuffing attack. 

In Adobe Identity Team we play a constant cat-and-mouse game with adversaries trying to employ botnets and automation against the login page. The billions of leaked usernames and passwords available on the dark net together with the easy-to-use tools and easy-to-rent botnets make attack attempts straightforward and extremely hard to counter. 

We block such attacks by designing a secure login process, which helps protect Adobe user accounts and ensures Adobe will not be held responsible for credentials leaked by other parties.