Adversaries may buy, lease, or rent a network of compromised systems that can be used during targeting. A botnet is a network of compromised systems that can be instructed to perform coordinated tasks.(Citation: Norton Botnet) Adversaries may purchase a subscription to use an existing botnet from a booter/stresser service. With a botnet at their disposal, adversaries may perform follow-on activity such as large-scale [Phishing](https://attack.mitre.org/techniques/T1566) or Distributed Denial of Service (DDoS).(Citation: Imperva DDoS for Hire)(Citation: Krebs-Anna)(Citation: Krebs-Bazaar)(Citation: Krebs-Booter)
Botnet
source_name: mitre-attack  url: https://attack.mitre.org/techniques/T1583/005  external_id: T1583.005     source_name: Norton Botnet  description: Norton. (n.d.). What is a botnet?. Retrieved October 4, 2020.  url: https://us.norton.com/internetsecurity-malware-what-is-a-botnet.html     source_name: Imperva DDoS for Hire  description: Imperva. (n.d.). Booters, Stressers and DDoSers. Retrieved October 4, 2020.  url: https://www.imperva.com/learn/ddos/booters-stressers-ddosers/     source_name: Krebs-Anna  description: Brian Krebs. (2017, January 18). Who is Anna-Senpai, the Mirai Worm Author?. Retrieved May 15, 2017.  url: https://krebsonsecurity.com/2017/01/who-is-anna-senpai-the-mirai-worm-author/     source_name: Krebs-Bazaar  description: Brian Krebs. (2016, October 31). Hackforums Shutters Booter Service Bazaar. Retrieved May 15, 2017.  url: https://krebsonsecurity.com/2016/10/hackforums-shutters-booter-service-bazaar/     source_name: Krebs-Booter  description: Brian Krebs. (2016, October 27). Are the Days of “Booter” Services Numbered?. Retrieved May 15, 2017.  url: https://krebsonsecurity.com/2016/10/are-the-days-of-booter-services-numbered/     