Botnets are a complex and continuously evolving challenge to user confidence and security on the Internet.
Combating botnets requires cross-border and multidisciplinary collaboration, innovative technical approaches,
and the widespread deployment of mitigation measures that respect the fundamental principles of the Internet.
Introduction
A botnet is a collection of Internet-connected user computers (bots) infected by malicious software (malware) that allows the
computers to be controlled remotely by an operator (bot herder) through a Command-and-Control (C&C) server to perform automated
tasks, such as stealing information or launching attacks on other computers. Botnet malware is designed to give its operators control
of many user computers at once. This enables botnet operators to use computing and bandwidth resources across many different networks
for malicious activities.
Historically, botnets mainly have been used to originate and propagate spam messages. They can be used for many malicious purposes,
including to steal personal data and passwords, attack public and private networks, exploit users’ computing power and Internet access,
and carry out Distributed Denial of Service (DDoS) attacks. [1] In short, botnets are a complex and continuously evolving problem that
poses a threat to user confidence in the Internet.
Various techniques are used to infect computers so they become bots, including luring users into downloading malware, exploiting
Internet browser vulnerabilities, and tricking users into loading malware (e.g., as a result of opening an infected email attachment).
Botnet malware is often designed to run in the background so users are unaware that their systems are infected
Source: https://www.internetsociety.org/policybriefs/botnets/?gclid=Cj0KCQjwgtWDBhDZARIsADEKwgNQkqv5vDqDXxag-_EMRIw3zVYdSGabFuUPN9hfWsMz6jqun3rr6MIaAk1UEALw_wcB
