BotNet News

Your source for Online Security News

A Botnet is a swarm of internet-connected devices that have been infected by malware, allowing them to be controlled as a collective. Attackers use the devices in a swarm to do everything from stealing data or spamming, to DDoS attacks and crypto mining. Cyber attackers can control thousands or even millions of devices. They hack the devices by leveraging vulnerabilities in software, security gaps in operating systems, or through phishing and malicious websites. Once the hacker is in control, they are ready to carry out an attack.

The attacker controls the bots via a central server and can instruct them to perform any illegal action from anywhere in the world. This massive scale allows them to inflict a crime that would be difficult, if not impossible, for them to accomplish alone.

As bots have become more sophisticated, they have evolved to evade detection and disruption. Early botnets communicated with the bot herder’s server, but newer bots use peer-to-peer models that obfuscate their communication by passing instructions between devices in the network.

Attackers can infect computers, mobile devices, and Internet of Things (IoT) hardware like routers, sensors, cameras, or home automation systems. Some IoT devices are so poorly secured, they can be easily co-opted into a botnet by simply connecting to the internet. They typically do so through a remote vulnerability, such as a factory-default password, or by exploiting security flaws in software, websites, or phishing scams. The devices then act as a “zombie” device, or a mindless robot, that is programmed to take instructions from the central control server.