The Coming Botnet Stock Exchange 105
Posted
by
Soulskill
from the where-do-i-go-to-invest dept.
from the where-do-i-go-to-invest dept.
Trailrunner7 writes "Robert Hansen, a security researcher and CEO of SecTheory, has been gleaning intelligence from professional attackers in recent months, having a series of off-the-record conversations with spammers and malicious hackers in an effort to gain insight into their tactics, mindset and motivation. 'He's not the type to hack randomly, he's only interested in targeted attacks with big payouts. Well, the more I thought about it the more I thought that this is a very solvable problem for bad guys. There are already other types of bad guys who do things like spam, steal credentials and DDoS. For that to work they need a botnet with thousands or millions of machines. The chances of a million machine botnet having compromised at least one machine within a target of interest is relatively high.' Hansen's solution to the hacker's problem provides a glimpse into a business model we might see in the not-too-distant future. It's an evolutionary version of the botnet-for-hire or malware-as-a-service model that's taken off in recent years. In Hansen's model, an attacker looking to infiltrate a specific network would not spend weeks throwing resources against machines in that network, looking for a weak spot and potentially raising the suspicion of the company's security team. Instead, he would contact a botmaster and give him a laundry list of the machines or IP addresses he's interested in compromising. If the botmaster already has his hooks into the network, the customer could then buy access directly into the network rather than spending his own time and resources trying to get in."
How to Pay? (Score:5, Funny)
Re:Bad title (Score:4, Funny)
Re:Bad title (Score:5, Funny)
Both involve trusting your money to less than scrupulous people to do all the work for you in hopes that you'll get back more than you put in with no rational reason to back up this hope.
Actually I take that back. The hackers will at least worry about their reputation.
Re:How to Pay? (Score:5, Funny)
I can hook you up with an acquaintance in Nigeria that's very good with money transfers aquaintenance, let me know.
Re:Bad title (Score:5, Funny)
Just wait. In a few years, they'll be applying for a bailout, too.
Re:Bad title (Score:2, Funny)