Massive ad fraud botnet taken down. Pretended to be human traffic, exploited Real-Time Bidding vulnerabilities. I researched this in 2013, interesting how long it take to be operationalized. services.google.com/fh/files/blogs… 
The scale of the operation is huge. Over 3 Billion bid request fraud, over 1 million of compromised machines. Border Gateway Protocol hijacking was even used. The biggest and most sophisticated operation like that ever.
What fascinates me is that the attackers used some of the techniques I tested and described here: lukaszolejnik.com/rtbdesc (some details omitted). I also played with the bot detection evasion ;)
The full indictment relating to owners of Methbot is here. Fraudulent ad agency in use. I recall discussions in 2014 about the (in)ability to detect fraudulent bidders. Security (or privacy) was not the core interest of Real-Time Bidding tech. justice.gov/usao-edny/pres…
