Slashdot Mirror
You Can Now Rent A Mirai Botnet Of 400,000 Bots (bleepingcomputer.com)
An anonymous reader writes: Two hackers are renting access to a massive Mirai botnet, which they claim has more than 400,000 infected bots, ready to carry out DDoS attacks at anyone's behest. The hackers have quite a reputation on the hacking underground and have previously been linked to the GovRAT malware, which was used to steal data from several US companies. Renting around 50,000 bots costs between $3,000-$4,000 for 2 weeks, meaning renting the whole thing costs between $20,000-$30,000.
After the Mirai source code leaked, there are countless smaller Mirai botnets around, but this one is [believed to be the one] accounting for more than half of all infected IoT devices...that supposedly shut down Internet access in Liberia. The original Mirai botnet was limited to only 200,000 bots because there were only 200,000 IoT devices connected online that had their Telnet ports open. The botnet that's up for rent now has received improvements and can also spread to IoT devices via SSH, hence the 400,000 bots total.
Interestingly, the article claims the botnet's creators had access \to the Mirai source code "long before it went public."
After the Mirai source code leaked, there are countless smaller Mirai botnets around, but this one is [believed to be the one] accounting for more than half of all infected IoT devices...that supposedly shut down Internet access in Liberia. The original Mirai botnet was limited to only 200,000 bots because there were only 200,000 IoT devices connected online that had their Telnet ports open. The botnet that's up for rent now has received improvements and can also spread to IoT devices via SSH, hence the 400,000 bots total.
Interestingly, the article claims the botnet's creators had access \to the Mirai source code "long before it went public."
By getting an article posted on slashdot and having the site you want DDoS'd linked in the summary :)
Jesus, I'm in the wrong line of work.
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
Cyber Monday could be interesting.
But seriously... other than causing chaos, does anything get accomplished with a DDoS that it provides some kind of value? I get the idea of a multi-pronged attack, but is there that much to gain?
Got slavertisements? Got political shit to say?
Rent Slashbot... Available right here!
I would approve of Hunter Killer teams solving this problem.
Just cruising through this digital world at 33 1/3 rpm...
It's available because Putin is finished using it.
Table-ized A.I.
There must be some low/non CPU intensive BOINC projects out there that could really appreciate this sort of 'net. I suppose it's probably not worth the time to get different router/IoT ASICs to actually run custom applications, compared with just pointing them to an IP for laughs.
Well, rustle my jimmies with hot grits -- imagine a beowolf cluster of these bots!
Thankfully I only use APPS and am protected with a HOSTS file, so I have nothing to worry about.
Throw a few of the would-be DDOSers in jail for a couple of years for the first offence. And ban them from the interwebs for 5 years after that on probation. You can be a sociopath but it will cost you. Might deter a few.
Where are we going and why are we in a handbasket?
Truer words have never been spoken
Could you rent the net and sneak in code to wipe the machines?
...than the fuel-celled car Toyota is releasing soon?
If it's between $3000 and $4000 for 2 weeks for 50,000 bots that means it's between $24,000 and $32,000 for all of them not $20,000 and $30,000. How do you guys fail at math that basic.
BeauHD. Worst editor since kdawson.
So a state-level actor rents out a botnet commercially? <Watches as cognitive dissonance explodes heads>
Custom electronics and digital signage for your business: www.evcircuits.com
No it's stupid. Voyager already covered this subject. The black gangbanger aliens with wild afros were called Kazon, and they were former slaves of the Trabe, who were rubber foreheaded white aliens.
I've been getting port scans for TR-069 in the past 4 days, in addition to the usual telnet and ssh. People are definitely on the move and also this suggests that there are new exploits in the wild
Yes. Exactly equivalent, if everytime you jaywalked, traffic ground to a halt and a million people couldn't get to where they were going for half a day.
Where are we going and why are we in a handbasket?
Yes, those million people will be lost without their porn and Facebook games.
My only hope is that someone will make an analogue "watchdog" disconnection device to the Web when the computer is idle for a period of time. This won't solve the problem but it will cut drastically the amount of units at their disposal.