What is a Botnet?

A botnet is a collection of internet-connected devices, which could include computers, servers, mobile devices, or IoT devices. The common theme is that they have all been infected by malware and brought under the control of a single attacking party often known as the “bot-herder.”

These individual devices, known as “bots,” are commanded to execute tasks en masse without their owners’ knowledge or consent.

Malware infections will often enter a device via the following methods:

• Infected software – For example an app, pirated download or browser extension.
• Downloads – A technique where software is installed on a users device without their knowledge, often by a website containing malicious software.
• Phishing links and spam emails – Scammers often used phishing attacks to spread their malware payload. By sending emails or SMS messages from seemingly genuine sources, the target can click and accidentally download the malware.
• USB or device transfer – An old but still popular malware infection method is by loading auto-running viruses on connected devices such as USB pens.
• Unsecured connections – Weak security on wifi networks can be exploited by malicious actors to brute force install malware on networked devices.

Once malware is installed, the bot-herder can remotely direct these devices to perform coordinated functions. Think of it like a nefarious puppet master pulling on digital strings.

The rate of infection and the growing complexity of these networks signify an alarming trend. It is not just the sheer size but also the sophistication of modern botnets that pose a grave threat to the integrity of internet traffic.