Kaspersky Finds Botnet Prices Starting at $100 on Dark Web Market – TradingView News

Kaspersky Digital Footprint Intelligence experts analyzed botnet sales on the dark web and Telegram shadow channels and found that attackers can acquire ready-made solutions for as little as $99. In addition to one-time purchases, botnets can be rented or purchased as leaked source code for a nominal price. In some cases, custom botnet development is also available.

A botnet is a network of malware-infected devices, from smart toothbrushes to advanced industrial internet devices, that attackers use to organize automated mass attacks such as DDoS. “Mirai is one of the most infamous examples of a botnet. It scans the internet for IoT devices with weak default passwords, uses a set of known default credentials to gain access, and infects them. Infected devices then become part of a botnet that can be controlled remotely to perform various types of cyberattacks,” explains Alisa Kulishenko, Security Researcher at Kaspersky Digital Footprint Intelligence.

Botnets like Mirai are created by cybercriminals for sale, with customized infection processes, malware types, infrastructure, and evasion techniques. Scammers sell them to other criminals on the shadow market, with botnets priced according to quality; this year, the lowest bids started at $99 and the highest were $10,000.

Example of a botnet sale offer on the darknet

Botnets are also available for rent. Prices range from $30 to $4,800 per month. “The potential profit from attacks using botnets for rent or sale can exceed the associated costs. They enable activities such as illegal cryptocurrency mining or ransomware attacks and others. Open sources indicate that the average ransom payment is two million dollars! On the other hand, renting a botnet costs much less and can pay off after just one successful attack,” adds Alisa Kulishenko. Since the beginning of 2024, Kaspersky experts have observed more than 20 offers to rent or sell botnets on dark web forums and Telegram channels.

Other options: Leaked bots and custom development

In addition to purchasing a pre-made solution, there are cheaper ways for nefarious actors to access botnets. Just as legitimate data can be leaked, botnet source code can also be publicly disclosed by malicious actors. This leaked source code can be accessed for free or for a fee of $10 to $50, based on information from about 400 dark web and shadow Telegram posts observed since early 2024. However, leaked botnets are generally considered an option for less sophisticated actors, as they are more likely to be detected by security solutions.

How much does botnet_infographic_final cost

A threat actor can commission a botnet from scratch. Development costs start at $3,000 and are not limited to any particular price range. “Most of these transactions happen privately, through personal messages, and partners are usually chosen based on reputation, such as forum ratings,” explains Alisa Kulishenko.

To avoid threats related to cybercriminal activity in the so-called shadow internet, it is worth implementing the following security measures in organizations:

• Use Kaspersky Digital Footprint Intelligence to help security analysts understand the adversary’s view of their company’s assets and quickly discover potential attack vectors available to them. It also helps to increase awareness of existing threats from cybercriminals, so that they can adjust their defenses or take remedial and elimination measures in a timely manner.
• Choose a reliable endpoint protection solution like Kaspersky Next, equipped with behavioral threat detection and anomaly control to provide effective protection against known and unknown threats.

About Kaspersky

Kaspersky is a global cybersecurity and digital privacy company founded in 1997. With over a billion devices protected from new cyberthreats and targeted attacks to date, Kaspersky’s deep threat intelligence and expertise are continually transformed into innovative solutions and services that protect businesses, critical infrastructure, governments and consumers around the world. The company’s comprehensive security portfolio includes leading endpoint protection, specialist security products and services, and Cyber ​​Immune solutions to combat sophisticated and evolving digital threats. We help over 220,000 corporate customers protect what matters most to them. Find out more at www.kaspersky.com.

Send us your press releases at [email protected]

Disclaimer: The content of this press release was provided by an external third-party provider. This website is not responsible for and has no control over such external content. This content is provided “as is” and “as available” and has not been edited in any way. Neither this website nor our partners guarantee the accuracy of nor endorse the views or opinions expressed in this press release.

This press release is provided for informational purposes only. The content does not constitute tax, legal or investment advice or an opinion regarding the suitability, value or profitability of any particular security, portfolio or investment strategy. Neither this website nor our partners are liable for any errors or inaccuracies in the content or for any actions you take in reliance thereon. You expressly agree that you use the information contained in this article at your own risk.

To the fullest extent permitted by applicable law, this website, its parent company, its subsidiaries, its affiliates and their respective shareholders, directors, officers, employees, agents, advertisers, content providers and licensors will not be liable (jointly or severally) to you for any direct, indirect, consequential, special, incidental, punitive or exemplary damages, including, without limitation, lost profits, lost savings and lost revenues, whether based on negligence, tort, contract or any other theory of liability, even if the parties have been advised of the possibility of such damages or could have foreseen such damages.