▾ G11 Media Network: | ChannelCity | ImpresaCity | SecurityOpenLab | Italian Channel Awards | Italian Project Awards | Italian Security Awards | ...
InnovationOpenLab

DoubleVerify Uncovers ShadowBot Scheme Involving 35 Million Spoofed Mobile Devices

DoubleVerify ("DV") (NYSE: DV), the leading software platform to verify media quality, optimize ad performance, and prove campaign outcomes, today released the discovery of ShadowBot, a fraudulent bot...

Business Wire

DV’s Fraud Lab detected amateur-level fraudster mistakes behind a $2.5M fraud operation targeting CTV and mobile inventory

NEW YORK: DoubleVerify ("DV") (NYSE: DV), the leading software platform to verify media quality, optimize ad performance, and prove campaign outcomes, today released the discovery of ShadowBot, a fraudulent bot scheme that generated over 35 million spoofed mobile devices in Q1 2025 and cost unprotected advertisers an estimated $2.5 million since the start of 2025.

The DV Fraud Lab identified ShadowBot targeting mobile and Connected TV (CTV) environments using rudimentary automation techniques, including mobile emulators and spoofed app IDs. While the scheme was widespread, it was riddled with amateur-level mistakes, making it detectable for advertisers protected by DV’s advanced fraud-detection systems.

ShadowBot shows that fraud doesn’t need to be sophisticated to be costly,” said Gilit Saporta, VP Product, Fraud & Quality at DoubleVerify. “It’s alarming to see $2.5M lost to bots using resolutions of an old CRT screen we all used back in the 1990s. The fraud scheme operator didn’t even bother to match its fake device signals to a proper mobile device. We’re happy to know that DV clients remain safe, thanks to DV’s AI-powered Fraud Lab, which catches subtle deviations from normal user behavior. That’s how we uncover the most sophisticated schemes out there, as well as the easier cases like ShadowBot.”

DV Fraud Labs identified five key red flags that uncovered ShadowBot:

  • Basic Automation Methods: ShadowBot used emulators that defaulted to screen resolutions (e.g., 800x600). This resolution is not typical for mobile devices.
    /li>
  • Overly Aggressive Traffic Generation: The operation produced abnormally high impression volumes that didn’t align with seasonal trends.
    /li>
  • Suspicious IP Activity: Fraudsters relied on anonymizing IP proxies, provided by long tail entities. The digital footprint of these proxy providers was riddled with fake testimonials, broken URLs, and known abuse reports.
    /li>
  • Lack of Behavioral Diversity: Devices showed identical impression counts, lacking the variability expected from real users.
    /li>
  • Improbable Engagement Patterns: Devices appeared to open 10 spoofed apps in just 9 minutes – behavior impossible for actual users.
  • “We’ve found that emerging media types, including mobile and CTV environments, are especially susceptible to fraud due to limited visibility and rapid growth,” added Lisa Toledano, who leads one of DV’s fraud detection teams. “Without consistent monitoring and adaptation, these high-value environments become easy targets. Protecting ad spend from these types of schemes requires an always-on approach.”

    “As the digital ecosystem continues to scale through automation, the emergence of sophisticated fraud schemes like ShadowBot reinforces the critical importance of transparency, quality, and accountability in media,” said Wayne Tassie, Group Director – Netherlands, DoubleVerify. “Safeguarding advertisers from spoofed environments is not just technically challenging for DV, it is fundamental to maintaining trust, protecting brand equity, and upholding investment integrity for our customers and partners. In an increasingly complex and fragmented landscape, brands rely on us to ensure their media investments deliver genuine impact, fostering long-term, mutually beneficial partnerships and reciprocal advocacy.”

    The DV Fraud Lab continues to monitor and shut down evolving fraud schemes across the open web, mobile apps, and streaming environments. With proprietary analytics tools, impression-level monitoring, and a global fraud lab, DV endeavors to ensure that brands and agencies can confidently protect their media investments.

    Read the full breakdown here: https://doubleverify.com/shadowbot-slip-ups-dvs-guide-to-fraudster-mistakes/

    About DoubleVerify

    DoubleVerify (“DV”) (NYSE: DV) is the industry’s leading media effectiveness platform that leverages AI to drive superior outcomes for global brands. By powering media efficiency and performance, DV strengthens the online advertising ecosystem, preserving the fair value exchange between buyers and sellers of digital media. Learn more at www.doubleverify.com.

    Fonte: Business Wire

    If you liked this article and want to stay up to date with news from InnovationOpenLab.com subscribe to ours Free newsletter.

    Related news

    Last News

    RSA at Cybertech Europe 2024

    Alaa Abdul Nabi, Vice President, Sales International at RSA presents the innovations the vendor brings to Cybertech as part of a passwordless vision for…

    Italian Security Awards 2024: G11 Media honours the best of Italian cybersecurity

    G11 Media's SecurityOpenLab magazine rewards excellence in cybersecurity: the best vendors based on user votes

    How Austria is making its AI ecosystem grow

    Always keeping an European perspective, Austria has developed a thriving AI ecosystem that now can attract talents and companies from other countries

    Sparkle and Telsy test Quantum Key Distribution in practice

    Successfully completing a Proof of Concept implementation in Athens, the two Italian companies prove that QKD can be easily implemented also in pre-existing…

    Most read

    Mastercard Incorporated to Host Information Session on Agentic Commerce…

    On Monday, July 14, 2025 at 10:00 a.m. Eastern Time, Mastercard Incorporated (NYSE: MA) will host a session to explore Mastercard’s recent announcements…

    Wave Function™ and Packsmith.ai: Redefining E-Commerce with AI Logistics

    #3PL--Wave Function™, a New Bedford, MA-based founding partnership company, has invested in Packsmith.ai, a Los Angeles-based, AI-driven third-party logistics…

    AI Unicorn EvenUp Opens New San Francisco Headquarters to Catalyze Growth…

    #AI--EvenUp, the highest-funded AI technology company serving personal injury law firms, has officially opened its new headquarters at 353 Sacramento…

    Amazon Prime Day 2025 Delivers Record Sales and Savings in Expanded Four-Day…

    Amazon announced today that Prime Day 2025 was its biggest Prime Day event ever and that customers saved billions on deals across more than 35 product…

    Newsletter signup

    Join our mailing list to get weekly updates delivered to your inbox.

    Sign me up!