IRSF is difficult to detect because of the complexity of telecom networks and the number of carriers involved. Attackers also use tactics such as low-and-slow attacks to circumvent detection.