Of all bot traffic, 37% is classified as malicious, with prevalent activities including data scraping, payment fraud, account takeovers, and DDoS attacks.

A recent study highlights a significant rise in malicious bot activity, revealing that these bots, enhanced by AI tools, now account for 45% of all internet traffic in Singapore, up from 35% the previous year.

The 2025 Imperva Bad Bot Report identifies the gambling, gaming, automotive, and travel sectors in Singapore as the most affected by bad bot activity, with prevalence rates reaching as high as 99.96%.

Politically motivated bot activities have surged, especially during Singapore's recent election period, where bots were used to manipulate public opinion through social media.

To combat these threats, Imperva advises businesses to implement multifactor authentication and real-time bot detection as effective measures against online fraud.

In 2024, bots made up 50.4% of internet traffic in Singapore, surpassing human-generated traffic and closely aligning with the global average of 51%, marking a notable shift in online activity.

Industries such as financial services, healthcare, and e-commerce are particularly vulnerable to bot-related threats, largely due to their reliance on APIs and sensitive data handling.

In 2024, Imperva reported blocking an average of two million AI-driven cyber attacks daily, with the ByteSpider Bot being responsible for over half of these incidents.

The travel sector is the most targeted globally, accounting for over 25% of bot attacks, with tactics like 'seat spinning' disrupting airline operations and ticket availability.

The report indicates a trend towards simpler, high-volume bot attacks, as automation allows attackers to execute large-scale operations with reduced technical complexity.

Singapore ranks fourth in the Asia-Pacific region for bad bot targeting, following Hong Kong, Indonesia, and Australia, highlighting the growing concern over bot activity.

Experts stress the importance of vigilance among internet users to avoid falling victim to sophisticated bot attacks, particularly those that seem too good to be true.