<< iChat vulnerability reported | Home | Storm Trojan infections not nearly as wide spread as thought? >>





September 25, 2007

Botnets moving beyond spam and DDoS

Symantec has posted an interesting article that describes the continuing evolution of botnets and their new malicious uses such as click fraud.

With a conservative botnet size of say, 10,000 computers, what else can an attacker use it for? One popular approach (understandably so) is to use the botnet to make easy money. Advertising networks, such as Google Ad-Sense, pay publishers of banner ads on a per-click basis. Depending on the advertising network, prices start as low as $0.01 per click and go as high as $0.50. An attacker can unleash their botnet on a banner ad page consisting of, say, 200 ads, and at $0.01 per click they can easily make a $20,000 profit. Obviously, the larger the botnet, the larger the potential profit. Moreover, if attackers find they have more than enough bots, they can rent out their botnet on the black market for as much as five cents per bot, per hour.

If more uses were more serious about their system's security and careful when it came to attachments and web links there wouldn't be nearly as many infections and bots to make up botnets.

[Botnets: not just for spamming anymore]

Posted in IRC News , Tech News by #!/usr/bin/geek at 2007-09-25 00:51 ET (GMT-5)

Tags:


Comments


Post a comment

(Required)


(Valid Email Required)

Store my name and email in a cookie so I don't have to enter it again:


Comments are subject to the WyldRyde IRC Network Comment Policy

Links, URLs, and Web Addresses are prohibited!





Use of this form signifies your agreement to the WyldRyde IRC Network Comment Policy!


<< iChat vulnerability reported | Home | Storm Trojan infections not nearly as wide spread as thought? >>