Botnet attacks are also used to damage or take down a competitor’s website.įast flux is a DNS technique used by botnets to hide phishing and malware delivery sites behind an ever-changing network of compromised hosts acting as proxies.Īny Internet service can be a target by botnets. A botnet attacks a network or a computer system for the purpose of disrupting service through the loss of connectivity or consumption of the victim network’s bandwidth and overloading of the resources of the victim’s computer system. mrc.Ī botnet can be used as a distributed denial of service weapon. GT-bots make use of the mIRC chat client to launch a set of binaries (mainly DLLs) and scripts their scripts often have the file extensions. GT stands for global threat and is the common name for bots scripted using mIRC. These bots have many versions in the internet mainly because mIRC is one of the most used IRC client for windows. Although its implementation is less varied and its design less sohisticated, these type of bots are well known and widely used in the internet. Like the previous type of bot, these bots are published under GPL, but unlike the above mentioned bots these bots are less abstract in design and written in rudimentary C compiler language.

Agobot is quite distinct in that it is the only bot that makes use of other control protocols besides IRC. It can use libpcap packet sniffing library, NTFS ADS and PCRE. Because of its modular approach, adding commands or scanners to increase its efficiency in taking advantage of vulnerabilities is fairly easy.

These bots can range from the fairly simple to highly abstract module-based designs. The bot is written using C++ with cross platform capabilities as a compiler and GPL as the source code. These are currently the best known bots with more than 500 versions in the internet today.

Agobot botnet