1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Discovered: Botnet Costing Display Advertisers over Six Million Dollars per Month

Discussion in 'BlackHat Lounge' started by phracktl, Mar 19, 2013.

  1. phracktl

    phracktl Regular Member

    Joined:
    Sep 2, 2012
    Messages:
    218
    Likes Received:
    152
    Hands Up, you must be here!

    Second thoughts, its probably a Google subsidiary out of Rico

    If not...please consider open sourcing your code


    Discovered: Botnet Costing Display Advertisers over Six Million Dollars per Month


    [TR="bgcolor: #b60009"] [/TR]
    Chameleon Botnet
    Date of discovery: 28 February, 2013
    Known as: Chameleon Botnet
    Discovered by: spider.io
    Activity identified: Botnet emulates human visitors on select websites causing billions of display ad impressions to be served to the botnet.
    Number of host machines: over 120,000 have been discovered so far
    Geolocation of host machines: US residential IP addresses
    Reported User Agent of the bots: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) and Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)
    Proportion of traffic that is botnet traffic from IP addresses of host machines: 90% (diluted by gateway IPs)
    Number of target websites across which the botnet operates: at least 202
    Proportion of traffic across the target websites that is botnet traffic: at least 65%
    Number of ad impressions served to the botnet per month: at least 9 billion
    Number of distinct ad-exchange cookies associated with the botnet per month: at least 7 million
    Average click-through rate generated by the botnet: 0.02%
    Average mouse-movement rate generated by the botnet: 11%
    Average CPM paid by advertisers for ad impressions served to the botnet: $0.69 CPM
    Monthly cost to advertisers of ad impressions served to the botnet: at least $6.2 million
     
    Last edited: Mar 19, 2013
  2. innozemec

    innozemec Jr. VIP Jr. VIP

    Joined:
    Aug 19, 2011
    Messages:
    5,290
    Likes Received:
    1,799
    Location:
    www.Indexification.com
    Home Page:
  3. mckanute

    mckanute Newbie

    Joined:
    Mar 5, 2013
    Messages:
    30
    Likes Received:
    1
    Occupation:
    UX Design / Linux Expat
    big big figures :target:
     
  4. proxygo

    proxygo Jr. VIP Jr. VIP Premium Member

    Joined:
    Nov 2, 2008
    Messages:
    10,296
    Likes Received:
    8,715
    and isnt it odd we have a donor member up in proxie chat
    who doesnt sell proxies, offering 90k proxies via pm
    and no1 can get 90k public proxies and that only leaves
    a botnet for that amount , makes me wonder

     
    Last edited: Mar 19, 2013
  5. innozemec

    innozemec Jr. VIP Jr. VIP

    Joined:
    Aug 19, 2011
    Messages:
    5,290
    Likes Received:
    1,799
    Location:
    www.Indexification.com
    Home Page:
    yeah, kind of odd indeed :)