4 ms·
I think a Tor hidden service would probably be a really good way to run C&C infrastructure. I'm surprised it doesn't get used more often. Or maybe it does?
by jstanley 9y ago
I think a Tor hidden service would probably be a really good way to run C&C infrastructure. I'm surprised it doesn't get used more often. Or maybe it does?
- randomerr 9y agoActually not. TOR is easily blocked and doesn't play well on mobile (install, bandwidth, and battery hog.) Plus if you're sending a small commands say in Twitter like ones below, no one would even notice. New Update http://somefile,com/command.json http://somefile,com/command.json Subscribe to @newJunkAccount and @AnotherJunkAccount @newJunkAccount has CLOSED his account
- jowsie 9y agoI've always wanted to know what happened with the creator of this botnet. https://blog.rapid7.com/2012/12/06/skynet-a-tor-powered-botnet-straight-from-reddit/ https://blog.rapid7.com/2012/12/06/skynet-a-tor-powered-botn...
- rightos 9y agoTor botnets are extremely common for ransomware and Bitcoin mining... however, Tor is readily blocked on some networks, so other considerations should be made - a variety of available approaches is generally the way to go.