So is this actually bot traffic of nun human machines or real human traffic that is bought and then just moved over all these page creating video and ad impressions without any actual interaction and clicks?
But it also doesn't explain where the traffic that is used to do the fraud actually comes from.
(And the term "session hijacking" is definitely abused for something that it doesn't normally mean.)