Carding Forum
Professional
- Messages
- 2,788
- Reaction score
- 1,223
- Points
- 113
Every fifth malicious request on the web is aimed at the travel industry.
The recovery of the tourism industry after the pandemic is facing a new threat — automated attacks. According to Imperva, almost 21% of all requests for attacks last year fell on the tourism sector.
Imperva's recent "Bad Bot Report 2024" indicates that the share of so-called "bad bots" in the web traffic of the tourism industry in 2023 was 44.5%, which is significantly higher than in 2022 — 37.4%.
With increased demand for travel during the summer season and during major sporting events in Europe, Imperva warns of a possible increase in bot activity. These automated systems target the industry through unauthorized scanning, site locking, account hijacking, and fraud.
Bots are software applications that perform automated tasks on the Internet. Most of these tasks, such as indexing sites for search engines or monitoring website performance, are legitimate. However, the number of malicious bots is growing.
Bad bots are involved in various malicious activities, ranging from DDoS attacks to fraudulent transactions. These threats can consume bandwidth, slow down servers, and disrupt business processes, even if they don't directly steal sensitive data.
The travel industry has been struggling with bot issues for a long time. One of the most common forms of attack is price scanning. Bots collect pricing and inventory information without permission, which can distort important business metrics and increase API costs. So, one airline lost about $ 500,000 a month due to traffic from bad bots.
Another problem is the blocking of seats, when bots repeatedly book and cancel flights or hotel rooms, creating the appearance of their shortage. This misleads customers by increasing prices and making it harder for real users to book, resulting in lost revenue and a worse customer experience.
In 2023, the travel industry ranked second in terms of account hijacking attempts. Cybercriminals hunt for valuable personal data, payment methods, and bonus points, which makes user accounts attractive for identity theft and fraud.
Imperva classifies malicious bot activity into three categories: simple, moderate, and advanced. Simple bots use scripts without disguise, moderate ones imitate browser technologies, and advanced ones imitate user behavior by bypassing detection systems.
The travel industry is particularly affected by advanced bots, which accounted for 61% of malicious bot traffic last year. These bots can achieve their goals with fewer requests and are more persistent, which increases the risk.
To counter such threats, Imperva recommends using multi-layer protection, including user behavior analysis and profiling. You should regularly monitor traffic anomalies and analyze suspicious sources. With the development of bot technologies, especially with the use of AI, distinguishing between good and bad traffic is becoming increasingly difficult.
Source
The recovery of the tourism industry after the pandemic is facing a new threat — automated attacks. According to Imperva, almost 21% of all requests for attacks last year fell on the tourism sector.
Imperva's recent "Bad Bot Report 2024" indicates that the share of so-called "bad bots" in the web traffic of the tourism industry in 2023 was 44.5%, which is significantly higher than in 2022 — 37.4%.
With increased demand for travel during the summer season and during major sporting events in Europe, Imperva warns of a possible increase in bot activity. These automated systems target the industry through unauthorized scanning, site locking, account hijacking, and fraud.
Bots are software applications that perform automated tasks on the Internet. Most of these tasks, such as indexing sites for search engines or monitoring website performance, are legitimate. However, the number of malicious bots is growing.
Bad bots are involved in various malicious activities, ranging from DDoS attacks to fraudulent transactions. These threats can consume bandwidth, slow down servers, and disrupt business processes, even if they don't directly steal sensitive data.
The travel industry has been struggling with bot issues for a long time. One of the most common forms of attack is price scanning. Bots collect pricing and inventory information without permission, which can distort important business metrics and increase API costs. So, one airline lost about $ 500,000 a month due to traffic from bad bots.
Another problem is the blocking of seats, when bots repeatedly book and cancel flights or hotel rooms, creating the appearance of their shortage. This misleads customers by increasing prices and making it harder for real users to book, resulting in lost revenue and a worse customer experience.
In 2023, the travel industry ranked second in terms of account hijacking attempts. Cybercriminals hunt for valuable personal data, payment methods, and bonus points, which makes user accounts attractive for identity theft and fraud.
Imperva classifies malicious bot activity into three categories: simple, moderate, and advanced. Simple bots use scripts without disguise, moderate ones imitate browser technologies, and advanced ones imitate user behavior by bypassing detection systems.
The travel industry is particularly affected by advanced bots, which accounted for 61% of malicious bot traffic last year. These bots can achieve their goals with fewer requests and are more persistent, which increases the risk.
To counter such threats, Imperva recommends using multi-layer protection, including user behavior analysis and profiling. You should regularly monitor traffic anomalies and analyze suspicious sources. With the development of bot technologies, especially with the use of AI, distinguishing between good and bad traffic is becoming increasingly difficult.
Source