QuickStudy: Botnets
Basic facts about the zombie menace
Botnets are networks of computers taken hostage by malware that controls them and makes them send spam and act in other nefarious ways. They’re growing in size, number and impact. A botnet may be remotely controlled by the creators of the malware that drives it (hence the “zombie” appellation) or it may be rented out by spammers or other persons of ill will. There is no known beneficial use for botnets.
Botnets were originally created to send spam. They were useful for that purpose because they masked the location and identity of the spammer, making it difficult for early spam-blockers to stop their flood of Viagra-selling and stock-swindling e-mail messages. Currently, they’re also used to launch denial of service attacks, manage adware campaigns, monitor user activity by logging keystrokes, or steal anything or any behavior from a computer that looks as if it might have value.
Botnets are created by a worm program that’s usually transmitted through a spam campaign, a spyware program or an adware campaign that leaves a program or other file behind. When a user clicks on a link that downloads a file of some type (which doesn’t even have to appear to be an executable file), it installs a botnet client, also known as a zombie, that can be controlled from afar.
All this mayhem is remarkably invisible to the user sitting in front of the infected machine. It’s uncommon for a machine inducted into a botnet to display any obvious sign of trouble, though users may notice periodic sluggishness with their net connections. (It’s not common for a botnet to deploy any single zombified computer constantly, making it even harder for spam-blockers or other monitors to pinpoint a troubled machine.)
Entire article: Computerworld
