Distil Networks has seen this attack on almost 1,000 customer websites. Fraudsters are using malicious automation to test a rolling list of potential account numbers and request each balance. If successful in obtaining the balance, fraudsters can resell the account number on the dark web or use them to purchase goods. On one customer website, the analyst team recorded 4 million bad bot requests per hour nearly 10 times their normal level of traffic. The operators of GiftGhostBot can test as many as 1.7 million gift card account numbers per hour.”]
Source: https://informationsecuritybuzz.com/news/distil-networks-uncovers-sophisticated-gift-card-fraud-bot/