botnetsnetworks
Botnets networks, commonly referred to as botnets, are networks of compromised computers and other internet-connected devices that are controlled remotely by an attacker, known as the bot herder. Each compromised device becomes a bot or zombie and can be commanded to perform coordinated actions without the owner's consent or knowledge. Botnets are used for various purposes and can span large parts of the internet.
Architecture: Bots connect to command-and-control (C2) infrastructure, which can be centralized (a few servers) or decentralized
Common activities: DDoS attacks, spamming, credential stuffing, data theft, click fraud, cryptocurrency mining, or spreading additional
Lifecycle: Infection vectors include malware distribution via phishing, drive-by downloads, or exploiting vulnerabilities. Infected devices report
Detection and defense: Network monitoring for unusual traffic patterns, DNS anomalies, and traffic to known bad