Botnet

2007internet slangclassic

Botnets are networks of hijacked computers or IoT devices controlled remotely by attackers to run automated tasks like spam floods, DDoS attacks, and credential theft. The word became widely known through cases like the 2007 Storm Worm and the 2016 Mirai attack that briefly knocked major sites offline.

Overview

A botnet is a network of internet-connected machines secretly compromised by malware and controlled by a single operator to run automated tasks like sending spam, launching DDoS attacks, or harvesting credentials3. In hacker slang, individual infected devices are called "zombies," and the operator directs them remotely, historically through IRC channels or dedicated command and control servers4.

The word botnet also became internet shorthand for anything sketchy that quietly phones home to a central operator, including jokes about Windows 10 telemetry or free VPN apps that resell users' bandwidth4. Threat researchers have tracked dozens of major botnets since the mid-2000s, and names like Storm, Zeus, and Mirai are still widely referenced in security circles.

How It Spread

Later families like the Zeus Botnet shifted the focus toward bank fraud and government data theft, and its author eventually sold the source code to the group behind the SpyEye malware kit3. On August 31, 2016, whitehat research group MalwareMustDie published the first public analysis of a new Linux worm called Mirai that was hijacking routers, DVRs, and IP cameras through weak Telnet passwords2. Weeks later, on September 22, 2016, KrebsOnSecurity was knocked offline for nearly four days by a massive Mirai-powered DDoS attack1.

On September 30, 2016, Mirai's author, using the handle Anna-Senpai, dumped the full source code on HackForums, which spawned dozens of copycat attack armies almost overnight1. In a January 17, 2017 investigation, Brian Krebs identified Anna-Senpai as Paras Jha, a Rutgers University student and co-owner of DDoS mitigation firm ProTraf Solutions, and reported that the name Mirai was taken from the anime "Mirai Nikki"1. Later that year, Jha, Josiah White, and Dalton Norman pled guilty to authoring Mirai, admitting they had originally built it to knock rival Minecraft server hosts offline for competitive advantage1.

How to Use This Meme

Outside of security papers, people often use "botnet" loosely online to accuse any piece of software of being creepy or spyware-like, common convention being to sarcastically label heavy telemetry, background analytics, or free tools that mine user data as "literally a botnet"4. In technical contexts, the word typically refers to a specific tracked family such as Mirai variants, Emotet, or Zeus descendants.

Frequently Asked Questions