Mobile Ad Networks as DDoS Vectors: A Case Study
Sep 25, 2015Marek Majkowski
Summary
This post details a novel DDoS attack vector utilizing mobile ad networks to distribute malicious JavaScript, which then floods Cloudflare customer sites with HTTP requests. It provides a case study of such an attack, analyzing the request patterns, the attack page, and the likely distribution mechanism through ad networks. This highlights a new type of threat that Cloudflare's platform is capable of detecting and mitigating automatically.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack