Pierluigi Paganini
April 23, 2014
Surfing on the Internet I have found The Bad Bot Landscape Report Q1 2014 and interesting study issued by the Distil Networks security firm which provides an interesting analysis of botnet evolution detected by the system of the company.
The Bad Bot Landscape Report Q1 2014 contains statistics on the evolution of malicious architectures under different axis of analysis like geographical area, originating ISP, originating organization and hosting provider, size and many others.
Experts at Distil observed an increase of cloud-hosted botnets, mainly based on the Amazon cloud architecture which was seen hosting 14% of malicious traffic.
Amazon isn’t the only provider abused by cybercrime, “cheap hosting” providers represent a privileged choice for bad actors because they usually implement a poor monitoring and a put in place a few safeguards to prevent bad bot origination.
Where Bad Bots Come From?
Russia, China, and India are not in the top positions of the ranking, the US (46%), Great Britain (19%), Germany (9.6 %), and The Netherlands (3.3%) are the top four countries exploited by criminals to host the malicious structure.
The botmasters preferred those countries because they host the largest number of quality Internet exchange points, an essential factor for the successfully deployment of the botnets.
“Those who develop bad bots want them to attack as fast as possible, prior to detection and mitigation steps, and they want to do this as cost effectively as possible. For this reason, they attempt to use inexpensive cloud hosting providers that offer quick and easy set-up. These cloud providers locate their infrastructure where space and bandwidth come cheap, which is at major Internet exchange points. Therefore, most frequent offending nations represent those with the largest number of quality Internet exchange points.” states the The Bad Bot Landscape Report Q1 2014.
The experts at Distil Networks revealed that Verizon Business was responsible for nearly 11 % of all malicious bot traffic while and Level 3 Communications account for 10%.
“From the ISP perspective, costs run much higher when trying to clean up infected computers. In the case of residential ISPs, informing consumers that their computers are infected with malware and helping them perform the associated cleanup would triple support costs,” explains the The Bad Bot Landscape Report Q1 2014.
Analyzing the botnet distribution per industry The Bad Bot Landscape Report Q1 2014 reports that the financial services industry is the one that serves up the highest botnet traffic.
During the last year Distil firm detected bad bot traffic originating from every wireless provider operating in the United States, botnets are targeting mobile platform, the illicit activities grew up of more than 1,000 percent in the last 12 months.
Following the Key findings:
(Security Affairs – The Bad Bot Landscape Report Q1 2014, botnet)
