


The purpose of this bot is to simulate fake views on specific eCommerce products and indirectly increase the visibility of the fraudster’s items.įirst, this chart shows the bot’s consistent increase in activity over the last year. The chart below shows the evolution of activity for a popular eCommerce Skewer bot, available on a fraudster Discord channel targeting the eBay marketplace.

To illustrate this trend, let’s review an example of data skewing. The objective is to make it appear that web visitors perform certain actions more often than they really do. Web analytics skewing: Attackers modify analytics data from platforms like Google Analytics or Adobe Analytics, by performing a large number of automated queries using bots.Machine learning data poisoning attacks : Attackers modify the training data used by a machine learning algorithm, causing it to make a wrong decision.There are two common variants of skewing attacks: In a skewing attack, attackers falsify (or skew) data, causing an organization to make the wrong decision in the attacker’s favor. Skewing bots are automated software whose purpose is to disrupt application telemetry to serve the fraudster’s interests. One of the threats we see growing is Skewing bots. In this blog, we will uncover some of those, focusing on Skewing and Scalping bots. The Imperva Threat Research Team is constantly on the lookout for new trends and techniques used by bad actors to improve their efficiency. Account takeover, credit card fraud, web scraping, API abuse, scalping, and distributed denial of service (DDoS) are just a few of the nefarious acts these bots are responsible for. Instead, it was automated traffic, commonly referred to as bots – software applications controlled by operators that run automated tasks, often with malicious intent. For fraudsters, this time of the year is above all, an opportunity for profits to be made, all while wreaking havoc on eCommerce applications.Īccording to the Imperva State of Security Within eCommerce Report, over the past 12 months, nearly 40% of traffic on retailers’ websites wasn’t human.

While Christmas is often seen by most as a joyous time to be spent with family and friends, exchanging good wishes and gifts, there are those who seek to exploit it.
