Form Spam Bot

A form spam bot allows adversaries to automate submitting unwanted content, for example, phishing messages or advertising links, into website forms.

Show Techniques

Hide Techniques

Resource Development 3 Tactics

Credential Acquisition

• Valid Accounts
• Fake Credibility Generation

Infrastructure Acquisition

• Botnet
• Command & Control
• Proxies

Tool Development

• Development of Tools
• Testing of Tools
• Campaign Reuse

Reconnaissance 2 Tactics

Specific Target

• Continual Content Scraping
• Periodic Content Scraping

Loose Target

• Continual Content Scraping
• Periodic Content Scraping

Defence Bypass 3 Tactics

Mitigation Bypass

• Automated CAPTCHA Bypass
• CAPTCHA Farm

Human Emulation

• Fake Credibility Generation
• User Agent Spoofing

Proxying

• Botnet
• User Agent Spoofing
• IP Rotation
• Smurfing

Attack Execution 1 Tactics

Fake Interaction

• Form Filling
• Comment Flooding
• Written Interaction