Botnet

Subtechnique · ATTACK:enterprise:T1583.005

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:T1583.005",
  "title": "Botnet",
  "type": "Subtechnique",
  "source_url": "https://attack.mitre.org/techniques/T1583/005",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--31225cd3-cd46-4575-b287-c2c14011c074",
  "external_id": "T1583.005",
  "domain": "enterprise",
  "created": "2020-10-01T00:49:05.467Z",
  "modified": "2025-10-24T17:48:36.255Z",
  "version": "1.2",
  "aliases": [

  ],
  "tactics": [
    "resource-development"
  ],
  "source_references": [
    {
      "source_name": "Krebs-Booter",
      "url": "https://krebsonsecurity.com/2016/10/are-the-days-of-booter-services-numbered/"
    },
    {
      "source_name": "Krebs-Bazaar",
      "url": "https://krebsonsecurity.com/2016/10/hackforums-shutters-booter-service-bazaar/"
    },
    {
      "source_name": "Krebs-Anna",
      "url": "https://krebsonsecurity.com/2017/01/who-is-anna-senpai-the-mirai-worm-author/"
    },
    {
      "source_name": "Imperva DDoS for Hire",
      "url": "https://www.imperva.com/learn/ddos/booters-stressers-ddosers/"
    },
    {
      "source_name": "Norton Botnet",
      "url": "https://us.norton.com/internetsecurity-malware-what-is-a-botnet.html"
    },
    {
      "source_name": "ORB Mandiant",
      "url": "https://cloud.google.com/blog/topics/threat-intelligence/china-nexus-espionage-orb-networks"
    }
  ]
}

Explicit source assertions (5)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.