More than 880 bot-driven DDoS attacks occurred daily in March.

Over 60% of online traffic to retailers is already bots, not humans. This number is expected to surpass 90% in the near future due to AI agents acting on behalf of consumers.

High technology organizations were the most targeted industry by bots overall, representing 35% of observed attacks.

Search engine crawlers accounted for 66% of wanted bot traffic.

37% of all observed internet traffic originated from bots.

Attacks on the commerce industry doubled, rising from 15% of all observed attacks in Q1 2024 to 31% of all observed attacks in Q1 2025.

Of the observed bot traffic, 89% was classified as unwanted.

Commerce websites attracted the largest proportion of unwanted bot traffic at 39%.

Attacks on the commerce industry doubled, rising from 15% of all observed attacks in Q1 2024 to 31% of all observed attacks in Q1 2025.

Attempted logins using compromised passwords averaged over 1.3 million per day in March 2025