Knowra Botnet Botnet A botnet is a network of compromised computers or devices remotely controlled by an operator. Its members can be coordinated to send spam, steal data, or disrupt online services.
Command and control : A system through which an operator sends instructions to remotely controlled devices. Botnet operators use command-and-control channels to coordinate compromised devices.
Distributed denial-of-service attack : An attack that overwhelms a target with traffic or requests from many systems. A botnet supplies distributed sources for flooding a website or network service.
Malware : Software designed to damage, disrupt, spy on, or gain unauthorized access to computer systems. Malware commonly infects devices and installs the software that makes them botnet members.
Mirai : Malware that recruited vulnerable Internet of Things devices into a large botnet, notably for denial-of-service attacks. Mirai demonstrated how weak default credentials could turn connected devices into attack infrastructure.
Cybercrime : Criminal activity involving computers, digital networks, or electronic data. Botnets provide infrastructure for many forms of financially motivated online crime.
Internet Relay Chat : A real-time text communication protocol that supports group channels and direct messaging. Early botnets commonly used IRC channels to distribute commands to infected computers.
Spam : Unsolicited bulk electronic messages, commonly sent for advertising, fraud, or malware distribution. Compromised devices can send large volumes of spam while obscuring its source.
Computer worm : A self-replicating malicious program that spreads between computers, often across networks. Worms can spread botnet infections from one vulnerable device to others.
Storm botnet : A peer-to-peer botnet active in the late 2000s, spread primarily through deceptive email attachments. Storm illustrates how a decentralized botnet could combine social engineering with resilient command distribution.
Botnet takedown : A coordinated effort to disrupt a botnet by disabling its control infrastructure or removing infected devices. Takedowns can interrupt botnet operations but may require action across providers and jurisdictions.
Show all 27