Fraudsters create farms where they put together a large number of smartphones. Devices are connected to a program, which simulates real users’ actions: clicks on ads, app installs, video views, etc. There is another way of farm organization: instead of multiple devices, a program is used that creates virtual copies of devices with constantly updated IDs. The program simulates real users’ actions in the same way, but this time – on the server. Bot traffic can also be generated by hijacked real user devices. People who download apps or add ons via 3rd party stores are vulnerable to become a possible bot node.