{"id":4846,"date":"2020-12-17T12:10:00","date_gmt":"2020-12-17T12:10:00","guid":{"rendered":"https:\/\/clickceasebiz.com\/blog\/?p=4846"},"modified":"2022-06-06T11:58:30","modified_gmt":"2022-06-06T11:58:30","slug":"click-fraud-malware-2020-hydra","status":"publish","type":"post","link":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/","title":{"rendered":"Click Fraud Malware 2020: Hydra"},"content":{"rendered":"\n<p>Click fraud and ad fraud has become a sophisticated operation in 2020. It\u2019s estimated that Hydra, another headline grabbing fraud operation, has been siphoning off over $150 million from advertisers this year.<\/p>\n\n\n\n<p>We take a look at the Hydra botnet, what it is and how it affects the marketing industry.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Name<\/td><td>Hydra<\/td><\/tr><tr><td>Status<\/td><td>Active (December 2020)<\/td><\/tr><tr><td>Summary<\/td><td>In-app malware active as of late 2020, estimated to be making millions of dollars for fraudsters<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2>What is Hydra?<\/h2>\n\n\n\n<p>Hidden within mobile apps, Hydra has been one of the most active click fraud malware operations of 2020. First identified by Protected Media in August 2019, Hydra has evolved since its discovery and has become a dynamic fraud threat, encompassing ad fraud and data theft.<\/p>\n\n\n\n<p>By using genuine user activity within infected apps to mask the fraudulent clicks, Hydra has been able to generate fake impressions and clicks on ads across multiple ad networks. And this has been key to it\u2019s success\u2026 By carrying out pockets of fraudulent clicks across different platforms, Hydra has managed to avoid widespread detection.<\/p>\n\n\n\n<p>With access to over 8000 apps, and by routing traffic through proxy servers, Hydra has been described as \u2018One of the most disciplined <a href=\"https:\/\/www.adexchanger.com\/ad-exchange-news\/monday-27072020\/\">ad fraud operations<\/a> ever seen\u2019.<\/p>\n\n\n\n<p>By constantly adding new layers and methods of attack, <a href=\"https:\/\/www.protected.media\/wp-content\/uploads\/2020\/07\/Operation-Slay-Hydra-Advisory.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Hydra <\/a>is more than just a simple bot clicker. <\/p>\n\n\n\n<h2>Ad fraud malware&nbsp;<\/h2>\n\n\n\n<p>Hydra represents a growing threat in the click fraud landscape from in-app malware. Using increasingly sophisticated methods, this form of bot can generate clicks and impressions on ads within apps, but can also be used to generate traffic onto mobile websites hosting video and display ads.<\/p>\n\n\n\n<p>Using apps allows fraudulent developers to mask their activity and conduct a variety of fraud attacks including click injection or clickjacking and ad fraud. In short, apps are increasingly becoming the go to source for fraud.<\/p>\n\n\n\n<p>This wholesale defrauding is referred to as ad fraud, which is a more organised version of click fraud.&nbsp;<\/p>\n\n\n\n<h2>Protecting your ads from fraud<\/h2>\n\n\n\n<p>Ads running on all programmatic platforms are open to click fraud. And with techniques such as app malware being increasingly hard to spot, using a solid fraud prevention platform is the best way to prevent your ad budget being depleted by click fraud and ad fraud.<\/p>\n\n\n\n<p>ClickCease has been protecting ads on Google\u2019s ad platforms, as well as Microsoft (Bing) Ads, since 2014. And with a growing blacklist, ClickCease is one of the best ways to prevent fraud from suspicious devices, unknown threats and known sources such as Hydra\u2019s IP addresses.<\/p>\n\n\n\n<p class=\"has-text-align-center\"><a href=\"https:\/\/www.clickcease.com\/blog\/how-our-click-fraud-prevention-works-and-why-its-the-best\/\" data-type=\"post\" data-id=\"4676\"><strong><em>Find out more about how ClickCease works here.<\/em><\/strong><\/a><\/p>\n\n\n\n<p>If you\u2019re running PPC ads, make sure to invest fraud protection to ensure you\u2019re not contributing to the $35 billion a year lost to fraud.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Click fraud and ad fraud has become a sophisticated operation in 2020. It\u2019s estimated that Hydra, another headline grabbing fraud operation, has been siphoning off over $150 million from advertisers this year. We take a look at the Hydra botnet, what it is and how it affects the marketing industry. Name Hydra Status Active (December [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":4856,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[2,5],"tags":[],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Click Fraud Malware 2020: Hydra | ClickCease Blog<\/title>\n<meta name=\"description\" content=\"Click fraud and ad fraud has become a sophisticated operation in 2020. It\u2019s estimated that Hydra, another headline grabbing fraud operation, has been siphoning off over $150 million from advertisers this year.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Click Fraud Malware 2020: Hydra | ClickCease Blog\" \/>\n<meta property=\"og:description\" content=\"Click fraud and ad fraud has become a sophisticated operation in 2020. It\u2019s estimated that Hydra, another headline grabbing fraud operation, has been siphoning off over $150 million from advertisers this year.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/\" \/>\n<meta property=\"og:site_name\" content=\"ClickCease Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ClickCease-484865984976254\/\" \/>\n<meta property=\"article:published_time\" content=\"2020-12-17T12:10:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-06T11:58:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2020\/12\/dragon.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1665\" \/>\n\t<meta property=\"og:image:height\" content=\"1553\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Oli Lynch\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/OliLynchWrites\" \/>\n<meta name=\"twitter:site\" content=\"@clickcease\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oli Lynch\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/\"},\"author\":{\"name\":\"Oli Lynch\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/b78aa0c9f82503dd2e1f6ea669e73d2b\"},\"headline\":\"Click Fraud Malware 2020: Hydra\",\"datePublished\":\"2020-12-17T12:10:00+00:00\",\"dateModified\":\"2022-06-06T11:58:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/\"},\"wordCount\":456,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#organization\"},\"articleSection\":[\"Ad Fraud\",\"Click Fraud\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/\",\"url\":\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/\",\"name\":\"Click Fraud Malware 2020: Hydra | ClickCease Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#website\"},\"datePublished\":\"2020-12-17T12:10:00+00:00\",\"dateModified\":\"2022-06-06T11:58:30+00:00\",\"description\":\"Click fraud and ad fraud has become a sophisticated operation in 2020. It\u2019s estimated that Hydra, another headline grabbing fraud operation, has been siphoning off over $150 million from advertisers this year.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.clickcease.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Click Fraud Malware 2020: Hydra\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#website\",\"url\":\"https:\/\/www.clickcease.com\/blog\/\",\"name\":\"ClickCease Blog\",\"description\":\"How to protect your ppc campaigns from click fraud.\",\"publisher\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.clickcease.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#organization\",\"name\":\"ClickCease\",\"url\":\"https:\/\/www.clickcease.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png\",\"contentUrl\":\"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png\",\"width\":300,\"height\":70,\"caption\":\"ClickCease\"},\"image\":{\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/ClickCease-484865984976254\/\",\"https:\/\/twitter.com\/clickcease\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/b78aa0c9f82503dd2e1f6ea669e73d2b\",\"name\":\"Oli Lynch\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6703777663617e10544867a6e661a11c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6703777663617e10544867a6e661a11c?s=96&d=mm&r=g\",\"caption\":\"Oli Lynch\"},\"description\":\"Since working for ClickCease, Oli has become something of a click fraud nerd, and now bores people at parties with facts about click farms and internet traffic stats. When not writing about ad fraud, he helps companies to optimise their marketing content and strategy with his own content marketing business.\",\"sameAs\":[\"http:\/\/www.olilynch.com\/\",\"https:\/\/www.linkedin.com\/in\/olilynch77\/\",\"https:\/\/twitter.com\/https:\/\/twitter.com\/OliLynchWrites\"],\"url\":\"https:\/\/www.clickcease.com\/blog\/author\/oli\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Click Fraud Malware 2020: Hydra | ClickCease Blog","description":"Click fraud and ad fraud has become a sophisticated operation in 2020. It\u2019s estimated that Hydra, another headline grabbing fraud operation, has been siphoning off over $150 million from advertisers this year.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/","og_locale":"en_US","og_type":"article","og_title":"Click Fraud Malware 2020: Hydra | ClickCease Blog","og_description":"Click fraud and ad fraud has become a sophisticated operation in 2020. It\u2019s estimated that Hydra, another headline grabbing fraud operation, has been siphoning off over $150 million from advertisers this year.","og_url":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/","og_site_name":"ClickCease Blog","article_publisher":"https:\/\/www.facebook.com\/ClickCease-484865984976254\/","article_published_time":"2020-12-17T12:10:00+00:00","article_modified_time":"2022-06-06T11:58:30+00:00","og_image":[{"width":1665,"height":1553,"url":"https:\/\/www.clickcease.com\/blog\/wp-content\/uploads\/2020\/12\/dragon.jpg","type":"image\/jpeg"}],"author":"Oli Lynch","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/OliLynchWrites","twitter_site":"@clickcease","twitter_misc":{"Written by":"Oli Lynch","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/#article","isPartOf":{"@id":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/"},"author":{"name":"Oli Lynch","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/b78aa0c9f82503dd2e1f6ea669e73d2b"},"headline":"Click Fraud Malware 2020: Hydra","datePublished":"2020-12-17T12:10:00+00:00","dateModified":"2022-06-06T11:58:30+00:00","mainEntityOfPage":{"@id":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/"},"wordCount":456,"commentCount":0,"publisher":{"@id":"https:\/\/www.clickcease.com\/blog\/#organization"},"articleSection":["Ad Fraud","Click Fraud"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/","url":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/","name":"Click Fraud Malware 2020: Hydra | ClickCease Blog","isPartOf":{"@id":"https:\/\/www.clickcease.com\/blog\/#website"},"datePublished":"2020-12-17T12:10:00+00:00","dateModified":"2022-06-06T11:58:30+00:00","description":"Click fraud and ad fraud has become a sophisticated operation in 2020. It\u2019s estimated that Hydra, another headline grabbing fraud operation, has been siphoning off over $150 million from advertisers this year.","breadcrumb":{"@id":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.clickcease.com\/blog\/click-fraud-malware-2020-hydra\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.clickcease.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Click Fraud Malware 2020: Hydra"}]},{"@type":"WebSite","@id":"https:\/\/www.clickcease.com\/blog\/#website","url":"https:\/\/www.clickcease.com\/blog\/","name":"ClickCease Blog","description":"How to protect your ppc campaigns from click fraud.","publisher":{"@id":"https:\/\/www.clickcease.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.clickcease.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.clickcease.com\/blog\/#organization","name":"ClickCease","url":"https:\/\/www.clickcease.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png","contentUrl":"https:\/\/clickceaseblog.kinsta.cloud\/wp-content\/uploads\/2019\/02\/cc-logo-black.png","width":300,"height":70,"caption":"ClickCease"},"image":{"@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/ClickCease-484865984976254\/","https:\/\/twitter.com\/clickcease"]},{"@type":"Person","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/b78aa0c9f82503dd2e1f6ea669e73d2b","name":"Oli Lynch","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.clickcease.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6703777663617e10544867a6e661a11c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6703777663617e10544867a6e661a11c?s=96&d=mm&r=g","caption":"Oli Lynch"},"description":"Since working for ClickCease, Oli has become something of a click fraud nerd, and now bores people at parties with facts about click farms and internet traffic stats. When not writing about ad fraud, he helps companies to optimise their marketing content and strategy with his own content marketing business.","sameAs":["http:\/\/www.olilynch.com\/","https:\/\/www.linkedin.com\/in\/olilynch77\/","https:\/\/twitter.com\/https:\/\/twitter.com\/OliLynchWrites"],"url":"https:\/\/www.clickcease.com\/blog\/author\/oli\/"}]}},"_links":{"self":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts\/4846"}],"collection":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/comments?post=4846"}],"version-history":[{"count":2,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts\/4846\/revisions"}],"predecessor-version":[{"id":4857,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/posts\/4846\/revisions\/4857"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/media\/4856"}],"wp:attachment":[{"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/media?parent=4846"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/categories?post=4846"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.clickcease.com\/blog\/wp-json\/wp\/v2\/tags?post=4846"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}