Adversaries may compromise numerous third-party systems to form a botnet that can be used during targeting. A botnet is a network of compromised systems that can be instructed to perform coordinated tasks.1 Instead of purchasing/renting a botnet from a booter/stresser service, adversaries may build their own botnet by compromising numerous third-party systems.2 Adversaries may also conduct a takeover of an existing botnet, such as redirecting bots to adversary-controlled C2 servers.3 With a botnet at their disposal, adversaries may perform follow-on activity such as large-scale Phishing or Distributed Denial of Service (DDoS).
- Norton Botnet
- Imperva DDoS for Hire
- Dell Dridex Oct 2015
使用该技术的组织
| 组织 | 名称 | 国家 |
|---|---|---|
| grp_g0001 | Axiom | China |
| grp_g1017 | Volt Typhoon | — |
| grp_g0099 | APT-C-36 | — |
| grp_g0125 | HAFNIUM | — |
| grp_g0034 | Sandworm Team | Russia |
断言
尚无指向该技术的公开断言。
记录自动入库·未人工复核;置信度与有效期按引用读取。