Explain like I'm five · Security

What is a Botnet?

A botnet, told as a story about villagers put under a spell by a bug, moving on the orders of a thief boss far away.

the bakerthe smiththe millthe cobblerwhoever the bug gets into gets red eyes — and doesn't notice

Villagers are quietly put under a spell. It's the bug from the gift box.Whoever the bug gets into gets red eyes. They don't notice. By day they bake bread and fix shoes as usual.

the boss: far away, hiddenthousands move at oncethe spellbound don't know why they walk

A thief boss gives one order from far away. Thousands move at once.The boss isn't in the village. He hides and only sends his voice. The spellbound don't even know why they walk.

the bossthe spellbound villagersour gatea botnet = a crowd of spellbound people one boss controlseach one is weak, but thousands moving at once are scary

A botnet is a crowd of spellbound people that one boss controls.Each one is weak. But thousands moving at once are scary. The boss never lifts a finger.

Spellbound by a bugthe bug from the gift box
The boss's voicefrom far away, all at once
Thousands at onceto the gate, scattering letters
They don't knowby day, life as usual
swarm the gatescatter fake letterstry keys on other doorsthe boss never lifts a finger — the spellbound do it allwhoever gets caught is a villager, not the boss

The boss gives the orders. Swarm the gate, scatter fake letters, try keys on other doors.When thousands swarm the gate, real visitors can't get in. Fake letters and key-trying are done by the spellbound too. Whoever gets caught is a villager, not the boss.

WOOF!the dog finds the bugthe watcher cuts the voicethe carpenter boards the holeremove the bug + cut the voice + board the holewhen the spellbound wake up, the boss is alone

Remove the bug, cut the boss's voice, and board up the hole.The dog finds the bug, the corridor watcher cuts the boss's voice, and the carpenter boards the hole. When the spellbound wake up, the boss is alone.

In one breath

Botnet = thousands of villagers spellbound by a bug, controlled by the voice of one boss far away. Stop it by removing the bug, cutting the voice, and boarding the hole.

A network of many malware-infected devices (bots, zombies) that an attacker remotely controls through a C2 server. Used for DDoS, spam, and credential stuffing; stopped by removing infections with EDR and blocking C2 traffic.

When grown-ups say it

Bot
One spellbound villager. One device the bug got into, listening to the boss.
Botnet
The whole spellbound crowd. One boss, thousands of spellbound. Linked like a net.
C2 (command and control) server
The boss's horn. Where the orders come from. Cut it and the crowd scatters. → the corridor watcher
Zombie
The red-eyed villager. Another name for a bot. Doesn't know it's under the spell.
DDoS
The fake crowd at the gate. The botnet's most common job. → the fake crowd at the gate
Spam
Scattered fake letters. When thousands of spellbound scatter letters, no one can trace the sender. → the letter pretending to be the post office
IoT botnet
Spellbound fridges and cameras. Not people but things get spellbound. Things that never get boards are easy to take.
Sinkhole
Sending the boss's voice into an empty room. When a spellbound villager calls the boss, the guard room answers instead. The boss's voice never arrives.
Next story
The Gang That Waits for Months →
Want another term as a picture book? Request →