← All glossary terms Glossary

What is Botnet?

A network of compromised devices controlled remotely by an attacker, often used for attacks or spam at scale.

A botnet is a collection of internet-connected devices — computers, servers, routers, even IoT gadgets — that have been compromised and are controlled remotely by an attacker. The owners usually have no idea their device is part of one. Attackers rent or use botnets to send spam, mine cryptocurrency, steal data, or launch large-scale denial-of-service attacks. A device pulled into a botnet is a sign of an underlying compromise, which is why unexplained outbound traffic and performance issues are worth investigating rather than ignoring.

  • A network of compromised devices controlled remotely by an attacker.
  • Used for spam, crypto-mining, data theft, and large-scale DDoS.
  • Owners usually have no idea their device is enrolled.

En français

Réseau de zombies (botnet)

Un réseau d'appareils compromis contrôlés à distance par un attaquant, souvent utilisés pour des attaques ou du pourriel à grande échelle.

Un réseau de zombies (botnet) est un ensemble d'appareils connectés à Internet — ordinateurs, serveurs, routeurs, voire objets connectés — qui ont été compromis et sont contrôlés à distance par un attaquant. Les propriétaires ignorent généralement que leur appareil en fait partie. Les attaquants utilisent ou louent des botnets pour envoyer du pourriel, miner de la cryptomonnaie, voler des données ou lancer des attaques par déni de service à grande échelle. Un appareil happé par un botnet est le signe d'une compromission sous-jacente, d'où l'intérêt d'enquêter sur un trafic sortant inexpliqué.

Botnet: frequently asked questions

How does a device become part of a botnet?

It gets compromised — often by malware from a phishing email, a malicious download, or an unpatched vulnerability — then quietly connects to the attacker's control infrastructure to await commands.

How do I know if a device is in a botnet?

Watch for unexplained outbound network traffic, sluggish performance, or the device contacting unfamiliar servers. Network monitoring and endpoint detection surface these signs.

Want to talk through how this fits your environment?

Book a no-obligation consultation and we'll explain how this plays out for an organization like yours.

Talk to our team