The Phantoms of the Fraudpera: An Overview of Anti-Detection Tooling
summary
Overview of commercial evasion tooling and attacker economics: four concrete categories—residential proxies, CAPTCHA solvers, anti-detect browsers, device farms—are widely available as B2B services with measured pricing (e.g., ~$1–$3 per 1,000 CAPTCHA solves, rotating residential IPs from ~$2.50/GB, anti-detect browser profiles for ~€5.85/month). These tools let attackers scale free-trial abuse and scraping; defenders win by increasing attacker cost or time, reducing payout, and layering defenses so ROI becomes uneconomic for mass abuse.
AI-written summary · about
chapters (10)
- 0:00Introduction and setup
- 1:49Fraud as a business
- 9:13Motivating scenario
- 10:38Proxy providers explained
- 14:53CAPTCHAs and solvers
- 18:20Device fingerprinting
- 19:23Anti-detect browsers
- 21:46Device farms
- 22:49Breaking attacker ROI
- 26:39Conclusion and Q&A
related talks
31mStrategies for Identifying and Mitigating Bot Threats
32mFriend or Replicant: How Attackers Automate and Disguise Themselves
52mBreaking Fraud and Bot Detection Solutions
50mArchitecture of an Anti-Bot Protection
41mThe State Of Credential Stuffing And The Future Of Account Takeovers
12mSpeed, scale & stealth: Securing against ATO events
52mFlying Under the Radar - New Security Evasion Techniques
40mYou have a security problem - your users