3184: Imperva Bad Bot Report Reveals 50% of Internet Traffic Is Non-Human

Feb 18, 2025

Lynn Marks, Senior Product Manager at Imperva, discusses shocking findings from the 2024 Bad Bot Report, revealing that nearly half of internet traffic comes from non-human sources. These advanced bots are now exploiting business logic rather than just technical flaws, escalating threats like transaction fraud and account takeovers. Lynn emphasizes the urgency for businesses to enhance security measures, particularly around APIs, which are prime targets for cybercriminals. She also addresses the bot challenges faced by industries like gaming and travel.

Ask episode

AI Snips

Chapters

Transcript

Episode notes

INSIGHT

Good Bots vs. Bad Bots

Bots are categorized as good or bad depending on their intended use.
The rise of generative AI and its training via web scraping fuels bad bot traffic.

INSIGHT

Shifting Bot Tactics

Bad bots are shifting from exploiting technical vulnerabilities to business logic.
This makes them harder to detect as they mimic legitimate user behavior.

ADVICE

Protecting Business Logic

Understand your business logic and identify crucial steps.
Collaborate with other teams to adjust business logic for better security.

Get the Snipd Podcast app to discover more snips from this episode

Get the app

The internet is evolving, but so are the threats that come with it. The latest Bad Bot Report from Imperva, a Thales company, reveals a staggering statistic: nearly 50% of internet traffic now comes from non-human sources, with bad bots making up almost one-third of all online activity.

These bots are no longer just simple scripts running in the background; they have become more advanced, leveraging AI to mimic human behavior and evade traditional detection methods. The consequences? A surge in transaction fraud, web scraping, data harvesting, and account takeovers, affecting industries across the board.

In this episode, I'm joined by Lynn Marks, Senior Product Manager at Imperva, who returns to the podcast to break down the key findings of the 2024 Bad Bot Report. We explore how bot activity is evolving, why businesses need to rethink their approach to security, and what proactive steps can be taken to mitigate these threats.

Lynn explains how attackers are shifting their focus from technical vulnerabilities to exploiting business logic, making it increasingly difficult for companies to detect and prevent malicious activity.

We also discuss the growing security challenges surrounding APIs, which have become prime targets for cybercriminals. With half of all account takeover attacks now targeting APIs directly, organizations need better visibility and stronger protections in place to defend against automated threats. Lynn shares insights on why industries like gaming and travel are seeing disproportionate bot activity and how businesses can better secure their platforms.

As AI legislation gains momentum worldwide, the conversation around bot management is becoming increasingly complex. How can companies stay ahead of evolving threats while ensuring compliance with emerging regulations? What lessons can be learned from past security failures? And more importantly, how can organizations take a proactive stance in the fight against automated cyber threats?

Tune in for an eye-opening conversation that sheds light on the hidden dangers lurking beneath internet traffic and learn how to better protect your business from the growing wave of automated attacks.