5 ms·
> Wouldn't it be costing the attacker some amount of money running the C&C server? Not necessarily. They could configure the C&C to run off of something like p
by tomschlick 10y ago
> Wouldn't it be costing the attacker some amount of money running the C&C server?
Not necessarily. They could configure the C&C to run off of something like pastebin/gist where they just input a list of IPs to attack and the botnet checks a specific url every X minutes for new instructions.
- deleted 10y ago[deleted]
- subie 10y agoThat's very cool. Wasn't aware of this technique.
- throwanem 10y agoAnd even if it's a more complicated scheme, there's nothing to suggest the attacker has to run C&C on a host for which he's paying. I scrubbed a lot of IRC daemons off legacy shared-hosting boxes, back in my admin days.