Botnets

 Botnets 

DISCLAIMER 

Do not attempt to create a botnet under any circumstances. They are highly illegal and against the Computer Misuse Act. 

What is a botnet? 

A botnet is a collection of computers that have been infected with malware. These computers are controlled by a hacker to send attacks against servers. Botnets are highly effective due to the sheer number of machines launching attacks on the server. 

Examples of botnet attacks 

• Mirai Botnet (2016): One of the most notorious botnet attacks, the Mirai botnet infected hundreds of thousands of IoT (Internet of Things) devices, such as cameras and routers, by exploiting weak or default passwords. It was used to launch massive Distributed Denial of Service (DDoS) attacks, including one that targeted Dyn, a major DNS provider, causing widespread internet outages across the United States. 
• WannaCry Ransomware (2017): While not a traditional botnet, WannaCry utilized a worm-like capability to spread rapidly across networks, infecting hundreds of thousands of computers worldwide. It exploited a vulnerability in Windows SMB (Server Message Block) protocol to encrypt files and demanded ransom payments in Bitcoin. Though its propagation wasn't solely based on botnet techniques, it demonstrated the potential for widespread disruption through automated propagation. 
• Satori Botnet (2017): Satori, also known as Okiru, targeted IoT devices like routers and security cameras, similar to Mirai. It quickly infected thousands of devices and was used to launch DDoS attacks, exploit vulnerabilities, and even mine cryptocurrencies using the processing power of compromised devices. 
• Marai Variant Attacks (2018): After the original Mirai source code was leaked online, numerous variants emerged, each with its improvements and targets. These variants continued to exploit IoT device vulnerabilities, leading to numerous DDoS attacks and disruptions across various industries. 
• Emotet Botnet (2019 - 2021): Emotet started as a banking trojan but evolved into one of the most sophisticated and widely distributed malware families. It primarily spread through malicious email attachments and links, infecting endpoints and turning them into bots. Emotet was often used as a payload delivery system for other malware, including ransomware and information stealers.