Re:A Startup With a Way to Filter Botnet Traffic Gets Funding
by morley on Tuesday June 24, 2014 @03:00PM
(#7939763)
Is there any research on how many botnets use Selenium? I would guess that most of them use something more basic just because it's a lot easier to put together.
[ Parent
| on HN ]
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding
by opendais on Tuesday June 24, 2014 @03:13PM
(#7939848)
How many use Selenium specifically? No.
It was just a random example that was intended to not point in an easily weaponized direction.
I figured it was both common and known in tech circles that Flash/Javascript executing botnets for ads existed and have for year(s):
http://www.spider.io/blog/2013/03/chameleon-botnet/
They were acquired by Google so it isn't just random blog spam:
http://techcrunch.com/2014/02/21/google-acquires-spider-io-t...
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding
by kylequest on Tuesday June 24, 2014 @03:17PM
(#7939872)
Installing Selenenium on infected machines is not very stealthy. The new malware usually tries to stay in the kernel to avoid detection. Try stuffing Selenium in the kernel :-)
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding
by eli on Tuesday June 24, 2014 @03:15PM
(#7939862)
My personal experience with comment/forum spam bot networks is that at least 90% do not understand javascript. The ones that do tend to have extremely realistic traffic patterns and the ability to solve captchas. I suspect those are actually real people with incredibly crappy jobs, not super-intelligent Selenium-powered bots.
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding
by paulgb on Tuesday June 24, 2014 @03:23PM
(#7939909)
Comment/forum spam is different game than botnet ad fraud. The latter executes JavaScript by design since it's often necessary to load the ads.
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding
by acfou on Monday June 30, 2014 @02:05PM
(#7966534)
see the charts from Incapsula in this article which show a third of the bots are not executing javascript
https://www.linkedin.com/today/post/article/20140623200557-8...