Live
- They always want me to win, and now I feel lucky to have been offered a story like ‘Zebra’: Satyadev Kancharana
- ‘Democracy first, humanity first’: PM Modi in Guyana's parliament on two countries' similarities
- PKL Season 11: Telugu Titans register third straight win to top standings
- Is Pollution Contributing to Your COPD?
- NASA Unveils Underwater Robots for Exploring Jupiter's Moons
- Additional Central forces arrive in violence-hit Manipur
- AR Rahman and Saira Banu’s Divorce: Legal Insights into Common Issues in Bollywood Marriages
- 82.7 pc work completed in HPCL Rajasthan Refinery area: official
- Curfew relaxation extended in 5 Manipur districts on Friday
- Tab scam prompts Bengal govt to adopt caution over fund disbursement
Millions of bad bots attacks on e-commerce sites detected
Millions of bad bots attacks on e-commerce sites detected (Photo/IANS)
Amid the online shopping spree during the holiday season, security researchers with Barracuda Networks, a leading provider of cloud-enabled security solutions, have detected millions of bad bots attacks on e-commerce websites.
New Delhi: Amid the online shopping spree during the holiday season, security researchers with Barracuda Networks, a leading provider of cloud-enabled security solutions, have detected millions of bad bots attacks on e-commerce websites.
These bad bots attacks were used by cybercriminals to run distributed denial of service (DDoS) attacks, make fraudulent purchases, and scan for vulnerabilities they can exploit, the company said.
"While analysing which Internet System Provider or Autonomous System Number has been the source of this bad bot activity, our researchers identified Indian mobile provider Airtel's subnet ranges in the mix, as well as some of the big public cloud providers like Google Cloud, Amazon," Murali Urs, Country Manager-India, Barracuda Networks, said in a statement.
"This shows that even though the source of bots is international, it would depend on the bot and the site it is targeting."
Barracuda Networks said it detected the bad bots attacks in November.
The company said that its security researchers ran the "Barracuda Advanced Bot Protection" in front of a test web application, and detected a staggering number of bad bots in just a few days with millions of attacks coming in from thousands of distinct IP addresses.
Bad bot personas are bots that have been identified as malicious based on their pattern of behaviour.
They are grouped by "User-Agent", some of which are good. For example, GoogleBot, which crawls sites and adds them to search rankings, is good and should not be blocked.
Cybercriminals have been using different ways to spoof good "User-Agents" to conduct the attacks.
The bad bots spoof these known good User-Agents, which would need deeper scrutiny to tell them apart.
With the holiday shopping season expected to continue in full swing till the New Year, e-commerce teams should start taking necessary steps to safeguard their applications against bad bots, Barracuda Networks said.
They must install a well-configured web application firewall as a service solution and make sure that the application security solutions include anti-bot protection to effectively detect advanced automated attacks, the company added.
