Abstract: Technologies are disclosed for mitigating attempts to capture traffic on a network using unauthorized advertisements. Responsive to detecting an authorized advertisement for a path to a service on the network, a mitigation/orchestration service may determine a synthetic route advertisement that is configured to win back the captured traffic (e.g., by providing a route specificity that is at least equal to the unauthorized advertisement) and propagate the synthetic route advertisement from routers in the network. The won back traffic may be directed through a backbone of the network to the service.