News for hackers. Stuff that matters.
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding by morley on Tuesday June 24, 2014 @03:00PM (#7939763)
Is there any research on how many botnets use Selenium? I would guess that most of them use something more basic just because it's a lot easier to put together.
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding by opendais on Tuesday June 24, 2014 @03:13PM (#7939848)
How many use Selenium specifically? No.

It was just a random example that was intended to not point in an easily weaponized direction.

I figured it was both common and known in tech circles that Flash/Javascript executing botnets for ads existed and have for year(s):

http://www.spider.io/blog/2013/03/chameleon-botnet/

They were acquired by Google so it isn't just random blog spam:

http://techcrunch.com/2014/02/21/google-acquires-spider-io-t...

Re:A Startup With a Way to Filter Botnet Traffic Gets Funding by kylequest on Tuesday June 24, 2014 @03:17PM (#7939872)
Installing Selenenium on infected machines is not very stealthy. The new malware usually tries to stay in the kernel to avoid detection. Try stuffing Selenium in the kernel :-)
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding by eli on Tuesday June 24, 2014 @03:15PM (#7939862)
My personal experience with comment/forum spam bot networks is that at least 90% do not understand javascript. The ones that do tend to have extremely realistic traffic patterns and the ability to solve captchas. I suspect those are actually real people with incredibly crappy jobs, not super-intelligent Selenium-powered bots.
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding by paulgb on Tuesday June 24, 2014 @03:23PM (#7939909)
Comment/forum spam is different game than botnet ad fraud. The latter executes JavaScript by design since it's often necessary to load the ads.
Re:A Startup With a Way to Filter Botnet Traffic Gets Funding by acfou on Monday June 30, 2014 @02:05PM (#7966534)
see the charts from Incapsula in this article which show a third of the bots are not executing javascript https://www.linkedin.com/today/post/article/20140623200557-8...