What is a Botnet?
A botnet, told as a story about villagers put under a spell by a bug, moving on the orders of a thief boss far away.
Villagers are quietly put under a spell. It's the bug from the gift box.Whoever the bug gets into gets red eyes. They don't notice. By day they bake bread and fix shoes as usual.
A thief boss gives one order from far away. Thousands move at once.The boss isn't in the village. He hides and only sends his voice. The spellbound don't even know why they walk.
A botnet is a crowd of spellbound people that one boss controls.Each one is weak. But thousands moving at once are scary. The boss never lifts a finger.
The boss gives the orders. Swarm the gate, scatter fake letters, try keys on other doors.When thousands swarm the gate, real visitors can't get in. Fake letters and key-trying are done by the spellbound too. Whoever gets caught is a villager, not the boss.
Remove the bug, cut the boss's voice, and board up the hole.The dog finds the bug, the corridor watcher cuts the boss's voice, and the carpenter boards the hole. When the spellbound wake up, the boss is alone.
Botnet = thousands of villagers spellbound by a bug, controlled by the voice of one boss far away. Stop it by removing the bug, cutting the voice, and boarding the hole.
A network of many malware-infected devices (bots, zombies) that an attacker remotely controls through a C2 server. Used for DDoS, spam, and credential stuffing; stopped by removing infections with EDR and blocking C2 traffic.
When grown-ups say it
- Bot
- One spellbound villager. One device the bug got into, listening to the boss.
- Botnet
- The whole spellbound crowd. One boss, thousands of spellbound. Linked like a net.
- C2 (command and control) server
- The boss's horn. Where the orders come from. Cut it and the crowd scatters. → the corridor watcher
- Zombie
- The red-eyed villager. Another name for a bot. Doesn't know it's under the spell.
- DDoS
- The fake crowd at the gate. The botnet's most common job. → the fake crowd at the gate
- Spam
- Scattered fake letters. When thousands of spellbound scatter letters, no one can trace the sender. → the letter pretending to be the post office
- IoT botnet
- Spellbound fridges and cameras. Not people but things get spellbound. Things that never get boards are easy to take.
- Sinkhole
- Sending the boss's voice into an empty room. When a spellbound villager calls the boss, the guard room answers instead. The boss's voice never arrives.