3rd party attacks