A March 13, 2026, report identifies malicious actors exploiting Cloudflare’s security and anti-bot services. These actors use the infrastructure to shield phishing and credential theft campaigns.

This abuse complicates threat detection by turning protective features into shields for attackers. The trend raises questions regarding service provider responsibility in preventing misuse.

The report advocates for advanced detection methods beyond traditional analysis. Recommended techniques include behavioral analysis and anomaly detection.