Anatomy of GiftGhostBot
If you’ve tried to check your balance on a gift card recently, you may have noticed that many retailers do not provide that information online. Instead, you received instructions to contact customer service by phone.
Why? An advanced persistent bot called GiftGhostBot automatically checks millions of gift card numbers to determine which have balances. After forensic analysis of the attributes of the GiftGhostBot, we identified five main profiles used in the attack.
