What is a Botnet?
A Botnet is a network of internet-capable devices—usually personal computers (PCs) or Internet of Things (IoT) devices—that hackers infect with malware. Once compromised, these devices become bots, or robot soldiers, that are remotely controlled by cybercriminals. Infections can occur when malware uses security holes, exploit kits and phishing attacks to install itself on vulnerable systems.
The hacker/cybercriminals that manage a Botnet are known as bot herders, and their goal is to gain profit from the devices they control. Infections can be used to attack and extort businesses, disrupt public services, steal personal information and even launch massive distributed denial of service (DDoS) attacks.
Once installed, bots are programmed to monitor for instructions from a central server known as a Command and Control (C&C) server. The C&C server can send commands via email, web downloads, IRC channels and other methods. Once the bots receive these instructions, they will carry out an attack.
As IoT devices grow in popularity, they are a prime target for attackers who use misconfiguration protocols and other vulnerabilities to hack them. However, it’s important to understand how these bots are created and what individuals can do to prevent them from being victimized. In addition to educating users on how to recognize an attack, it’s also helpful for organizations to work to improve their device configuration and management protocols to help reduce the threat.