The Opt-in Social Protesting Botnet

Speaker: Günter Ollmann

For the last few years social networking services have grown in breadth, scope and popularity. Their ability to attract huge groups of like-minded individuals from around the world and coordinate global protest actions and cyber attacks has also not gone unnoticed. 2009 saw many instances where new social networking groups appeared overnight, attracting tens-of-thousands members to a specific cause, and served as a centralized command and control for coordinated attacks. In several public instances participants willing installed classic botnet agents on their systems to take more active and damaging roles in the attacks. We've already seen some of the tools and baby-steps in to taking protesting online, but what will it look like when things get really start to get serious? What happens when you embrace Social Networking sites to further your cause and harness hundreds-of-thousands of compatriots, arm them with new-generation cyber-warfare tools, and launch coordinated attacks? How has online protesting jumped from classic Web denial of service or mail flooding, and in to social jihad botnets that embrace other channels such as blogosphere disinformation and telephony services? Next generation tools are already being created. The reasons for taking up cyber-arms are increasingly prevalent. How should you deal with attacks that may be targeted at your organization by your own customers? What are the implications of being a facilitator when your own employees take up cyber-arms and join a social jihad?