USENIX Security ’17 - Understanding the Mirai Botnet

Manos Antonakakis, Georgia Institute of Technology; Tim April, Akamai; Michael Bailey, University of Illinois, Urbana-Champaign; Matt Bernhard, University of Michigan, Ann Arbor; Elie Bursztein, Google; Jaime Cochran, Cloudflare; Zakir Durumeric and J. Alex Halderman, University of Michigan, Ann Arbor; Luca Invernizzi, Google; Michalis Kallitsis, Merit Network, Inc.; Deepak Kumar, University of Illinois, Urbana-Champaign; Chaz Lever, Georgia Institute of Technology; Zane Ma and Joshua Mason, University of Illinois, Urbana-Champaign; Damian Menscher, Google; Chad Seaman, Akamai; Nick Sullivan, Cloudflare; Kurt Thomas, Google; Yi Zhou, University of Illinois, Urbana-Champaign
The Mirai botnet, composed primarily of embedded and IoT devices, took the Internet by storm in late 2016 when it overwhelmed several high-profile targets with massive distributed denial-of-service (DDoS) attacks. In this paper, we provide a seven-month retrospective analysis of Mirai’s growth to a peak of 600k infections and a history of its DDoS victims. By combining a variety of measurement perspectives, we analyze how the botnet emerged, what classes of devices were affected, and how Mirai variants evolved and competed for vulnerable hosts. Our measurements serve as a lens into the fragile ecosystem of IoT devices. We argue that Mirai may represent a sea change in the evolutionary development of botnets-the simplicity through which devices were infected and its precipitous growth, demonstrate that novice malicious techniques can compromise enough low-end devices to threaten even some of the best-defended targets. To address this risk, we recommend technical and nontechnical interventions, as well as propose future research directions.
View the full program: www.usenix.org/sec17/program

[@libsh5684]

Fun fact : Mirai was was made by a Minecraft hacker that wanted to use it to DDos attack minecraft before he sold it

[@LaxmikantBhumkar]

Thanks for detailed review on MIRAI Botnet

[@itsKNR]

Very cool.

[@yeweiyuan749]

Thx for this video

[@00Noontide]

Thanks!

[@hyperpvp8823]

Imagine a virus that was used against minecraft servers then becoming the most feared worm Pfft...

[@JohnSmith-xf5im]

Sipover?

[@kairodavian114]

Sorry to be so off topic but does someone know a method to get back into an instagram account? I stupidly forgot the account password. I would love any tips you can give me!

[@kairodavian114]

@Ryan Esteban I really appreciate your reply. I found the site thru google and im in the hacking process atm. I see it takes a while so I will get back to you later with my results.

[@kairodavian114]

@Ryan Esteban It did the trick and I finally got access to my account again. Im so happy:D Thanks so much, you saved my account !

[@ryanesteban982]

@Kairo Davian Happy to help =)

[@xKreesherZ]

what is a finger printable scan packet? what protocol should i study to understand this?

[@xKreesherZ]

wait i think i got it, does it mean basically that the bot is asking to random devices what operative system they have?

[@kornbread5359]

Its so cool. Much like an artificial ecosystem, virus form infect and evolve. What if it could be used for good rather than bad?

[@adriatical9016]

how could that be used for good?

[@Well_Edumacated]

To bad the writer of the Original code can’t take credit for the genius of their code.

[@Nick-lx4fo]

Why should they receive praise for that?

[@ChilledBacon]

@@Nick-lx4fo cause the feat is so stupidly easy to understand yet complex enough that straight up nations were scared despite being a single dude. He's prolly working with the feds to clean it up tho

[@Nick-lx4fo]

@@ChilledBacon It was made by a group of 3. The botnet was used by them for profit, clearly nefarious. Not under any circumstances would it be logical for them to have received any praise

[@ChilledBacon]

@@Nick-lx4fo it was nefarious, but it's still an incredible piece of code especially at such a young age. I'm not saying what he did was right, im saying it is impressive

[@Nick-lx4fo]

@@ChilledBacon I can qualify your point in some respect, but remember that they were in college probably studying the same subject. Moral: Greed and childish immaturity mixed with a considerably expanded corpus of knowledge in computer science and cyber security can breed a shit storm