hn • r/hackernews
Comment on: Citigroup, Idaho, and Build-a-Bear Launched a Coordinated Attack on Me
Author here (I run the honeypot).Since "coordinated attack" will raise eyebrows: the named organizations didn't coordinate
anything, but malware running on their networks did. Each organization has a compromised device
somewhere on its network, a laptop or a VoIP phone or an appliance, that got recruited into a
botnet. The coordination is the botnet's command-and-control (C2). Dozens of these machines,
across unrelated networks, hit the same target phone number inside the same 27-hour window and spoofed
the same small set of fake caller IDs. Independent infections don't pick the same disguises