Cybersecurity

What is Botnet?

Quick answer

A network of compromised computers or devices controlled remotely by an attacker, often used for spam, fraud, or DDoS attacks.

Botnet, explained

Each infected machine in a botnet, sometimes called a zombie, runs malware that lets an attacker send it commands from a command-and-control server. Owners usually have no idea their device is involved.

Botnets can include laptops, servers, routers, and especially poorly secured Internet of Things devices like cameras that still use default passwords. The Mirai botnet, first seen in 2016, hijacked large numbers of IoT devices to launch major distributed denial-of-service attacks. Botnets are also used to send spam, steal credentials, mine cryptocurrency, and commit ad fraud. Defenses include changing default passwords, applying firmware updates promptly, segmenting home and office networks, and monitoring for unusual outbound traffic.

Related terms

Guides that mention Botnet