The Bots That Hit Hardest in Q2
Bot attacks are draining profits and overwhelming defenses. The Q2 2025 Threat Report gives security and fraud teams a clear look at the adversaries and bot economy fueling it all.
Bots that Hit Hardest in Q2
Bot attacks are draining profits and overwhelming defenses. The Q2 2025 Threat Report gives security and fraud teams a clear look at the adversaries and bot economy fueling it all.
Attackers Start Simple, Then Escalate
Last quarter, over half of all bot traffic came from basic scripts — cheap and noisy, but devastating at scale. When those failed, adversaries quickly pivoted to more advanced tactics.
Low-skill, high-volume attacks that still overwhelm defenses.
Evasive, stealthier attacks using proxies and headless browsers.
Adaptive, human‑like attacks designed to beat detection.
Three Critical Threats Emerged
Kasada’s research identified three dominant attack vectors that are reshaping the cybersecurity landscape in 2025, including scraping, account takeover (ATO), and automated checkout.
Three Critical Threats Emerged
Our research identified three dominant attack vectors that are reshaping the cybersecurity landscape in 2025, including scraping, account takeover (ATO), and automated checkout.
AI Scrapers Flooded Sites
Over 120M AI scraper requests detected in Q2 — most from the OpenAI user agent, peaking at 950K/day. These tools bypass robots.txt to repurpose your content without consent.
Account Takeovers Soared
Retail, QSR, and webmail made up ~72% of stolen account sales in Q2. Airline ATO activity spiked 80%, while accommodation sector revenue soared 196%.
Hype Bots Fueled Markups
Bot-powered resale surged as 3,160 Labubu doll checkouts drove markups of +25% to +127% — fueled by just two cook groups.
AI Scrapers Flooded Sites
Over 120M AI scraper requests detected in Q2 — most from the OpenAI user agent, peaking at 950K/day. These tools bypass robots.txt to repurpose your content without consent.
Account Takeovers Soared
Retail, QSR, and webmail made up ~72% of stolen account sales in Q2. Airline ATO activity spiked 80%, while accommodation sector revenue soared 196%.
Hype Bots Fueled Markups
Bot-powered resale surged as 3,160 Labubu doll checkouts drove markups of +25% to +127% — fueled by just two cook groups.
Who’s at Risk
Six key industries were most targeted by bots in Q2 – here’s how attackers profited from each.
Retail
Loyalty points & stored payment data targeted.
Airlines
Frequent flyer accounts sold at scale.
Gaming
Bots exploiting limited‑release items.
Hospitality
Premium hotel loyalty accounts in demand.
QSR
Mobile order accounts as low‑risk, high‑volume targets.
Real Estate
Listing data scraped for competitive advantage.
About the Data
KasadaIQ provides an inside view into the adversary ecosystem — analyzing millions of automated interactions each quarter across 2,000+ collection points and 23M+ messages from open and closed sources. This intelligence informs our defenses and helps enterprises stay ahead of evolving threats.
