Press Release Banner

Cequence Security Thwarts Wave of Automated Attacks on Australian Super Funds

AI-powered platform outsmarts bots and protects where legacy tools fail

SYDNEY, Australia – April 12, 2025 – Cequence Security, a pioneer in API security and bot management, today announced it successfully mitigated a wave of automated cyber-attacks targeting Australian Superannuation (“Super”) Funds. The attacks, widely suspected to involve credential stuffing and API abuse, underscore the growing threat of bots that bypass traditional defenses and compromise critical financial infrastructure.

“These types of attacks are becoming more sophisticated, more frequent, and far harder to detect with traditional tools,” said Ameya Talwalkar, CEO of Cequence. “Unlike manual hacks, these campaigns are driven by automation — bots that can mimic real users and overwhelm defences in seconds. Cequence was built to detect and stop these kinds of attacks, and we’re doing it for some of the world’s largest and most targeted organisations.”

Bot attacks have rapidly evolved in scale and complexity. Attackers now deploy large bot networks to simulate legitimate users, exploiting vulnerabilities in APIs and reusing stolen credentials from previous breaches. Even multi-factor authentication (MFA) can be bypassed as bots harvest and replay session tokens.

“Legacy protections like WAFs and API gateways weren’t built to stop this kind of activity,” said Shreyans Mehta, co-founder and CTO at Cequence. “You need defences that detect anomalies and automatically adapt in real-time using AI and machine learning — even when your security team is offline.”

Cequence’s Unified API Protection (UAP) platform continuously monitors application traffic at scale. Rather than relying on static rules, it learns what legitimate user behavior looks like, then flags and blocks anything that deviates — stopping bot attacks before they cause harm.

In the recent Super Fund incident, Cequence detected malicious patterns immediately and neutralised them in real time. The defence was seamless — with no service interruptions, no code changes required, and attackers unaware they’d been blocked.

Cequence protects some of the world’s most targeted institutions — including the most attacked organisation globally, the largest ETF provider, the biggest credit card network, and the largest mining company. The platform also safeguards over 500 million users across 8 global telcos, analyzing billions of API transactions daily to identify threats before they become widespread.

“The threat is only growing,” said Glen Maloney, regional director for ANZ at Cequence. “We’re working closely with Australian organisations that now see firsthand how traditional tools fall short in the face of these advanced bot attacks. It’s no longer enough to block traffic based on IP addresses or static rules. You need real-time, adaptive defences that understand context and behaviour — especially in high-risk sectors like Superannuation. We’re proud to bring Cequence’s proven global protection to support the Australian market.”

Free Protection for Impacted Super Funds

In response to the latest wave of attacks, Cequence is offering a free, three-month full access license to its Unified API Protection platform — no limitations and no strings attached.

To activate the offer, email super@cequence.ai.

About Cequence Security

Cequence is a pioneer in API security and bot management, protecting the applications and APIs that organisations depend on from cyber attacks, business logic abuse, and fraud. Our unique Unified API Protection platform unites discovery, compliance, and protection capabilities, delivering unmatched real-time defence against advanced threats. Demonstrating value in minutes — not days or weeks — Cequence offers a flexible deployment model that requires no code changes or app instrumentation. Cequence solutions scale to support the largest and most demanding private and public sector organisations, safeguarding more than 8 billion API interactions daily and over 3 billion user accounts.
Learn more at www.cequence.ai.

Media Contact
Katrina Porter
pr@cequence.ai