14. Botnet Survival, cont.

• The botnet itself is also a worm

• Recent bot clients began DDoS'ing any computer that attempted to detect them by scanning.

• Many still using IRC to communicate -- over SSL

  • (that means you cannot detect their presence -- unstoppable.)

• Botnet became a living and breathing ecosystem.