FORENSIA

ATT&CK · T1584.005 · sub-technique

Botnet

Tactics: resource-development

About

Adversaries may compromise numerous third-party systems to form a botnet that can be used during targeting. A botnet is a network of compromised systems that can be instructed to perform coordinated tasks. Instead of purchasing/renting a botnet from a booter/stresser service, adversaries may build their own botnet by compromising numerous third-party systems. Adversaries may also conduct a takeover of an existing botnet, such as redirecting bots to adversary-controlled C2 servers. With a botnet at their disposal, adversaries may perform follow-on activity such as large-scale Phishing or Distributed Denial of Service (DDoS).

Used by actors

5 known groups

Software

0 malware/tools implement this

None mapped.

Corpus indicators tagged with this technique

0 indicators in the corpus carry T1584.005.

No corpus indicators are tagged with this technique yet.