Live
- GAIL clocks net profit of Rs 2,672 crore in Q2
- Sr Men's National Hockey: Delhi, Karnataka, Bengal, A.P. win group matches on Day 2
- ‘Nation is proud of you’: West Bengal Guv to GRSE on laying keels of two NGOPVS
- Kirttane, Kapadia bag golden double as India wins 14 medals in Asia Pickleball Games
- Gurugram: 11 projects of GMDA worth Rs 249.77 crores approved
- Akali Dal stages statewide protests over ‘tardy’ paddy procurement in Punjab
- Firing on Nandan Kanan Express in Odisha, probe launched
- Indian Army Seizes Massive Cache Of Arms And Ammunition In Manipur Amid Ongoing Violence
- Polling Stations Open Across Eastern And Central US As Voters Head To The Ballots In Historic Election
- Hyatt set to expand brand presence in Nepal with hyatt regency lumbini
Millions of bad bots attacks on e-commerce sites detected
Millions of bad bots attacks on e-commerce sites detected (Photo/IANS)
Amid the online shopping spree during the holiday season, security researchers with Barracuda Networks, a leading provider of cloud-enabled security solutions, have detected millions of bad bots attacks on e-commerce websites.
New Delhi: Amid the online shopping spree during the holiday season, security researchers with Barracuda Networks, a leading provider of cloud-enabled security solutions, have detected millions of bad bots attacks on e-commerce websites.
These bad bots attacks were used by cybercriminals to run distributed denial of service (DDoS) attacks, make fraudulent purchases, and scan for vulnerabilities they can exploit, the company said.
"While analysing which Internet System Provider or Autonomous System Number has been the source of this bad bot activity, our researchers identified Indian mobile provider Airtel's subnet ranges in the mix, as well as some of the big public cloud providers like Google Cloud, Amazon," Murali Urs, Country Manager-India, Barracuda Networks, said in a statement.
"This shows that even though the source of bots is international, it would depend on the bot and the site it is targeting."
Barracuda Networks said it detected the bad bots attacks in November.
The company said that its security researchers ran the "Barracuda Advanced Bot Protection" in front of a test web application, and detected a staggering number of bad bots in just a few days with millions of attacks coming in from thousands of distinct IP addresses.
Bad bot personas are bots that have been identified as malicious based on their pattern of behaviour.
They are grouped by "User-Agent", some of which are good. For example, GoogleBot, which crawls sites and adds them to search rankings, is good and should not be blocked.
Cybercriminals have been using different ways to spoof good "User-Agents" to conduct the attacks.
The bad bots spoof these known good User-Agents, which would need deeper scrutiny to tell them apart.
With the holiday shopping season expected to continue in full swing till the New Year, e-commerce teams should start taking necessary steps to safeguard their applications against bad bots, Barracuda Networks said.
They must install a well-configured web application firewall as a service solution and make sure that the application security solutions include anti-bot protection to effectively detect advanced automated attacks, the company added.
