In recent years there’s been a rise in “API Abuse” attacks, which includes detrimental automated behaviors such as malicious bots, account takeover (ATO), credential stuffing, application layer (L7) DDoS, data scraping, and more. For instance, in April-2021 malicious actors scraped the personal data of over 533 million Facebook users, including phone numbers, email addresses, locations and much more, by exploiting a vulnerability in Facebook’s API. The attackers then made the data available for sale on…
