{"id":44443,"date":"2015-07-17T09:23:53","date_gmt":"2015-07-17T16:23:53","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=44443"},"modified":"2025-08-31T22:45:57","modified_gmt":"2025-09-01T05:45:57","slug":"social-networks-but-for-botnets","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/internet-security\/social-networks-but-for-botnets\/","title":{"rendered":"Social Media Swamped by Social Botnets"},"content":{"rendered":"

As anyone with a newsfeed will tell you, fake social media accounts have been on the rise in recent years. A recent study<\/a> revealed nearly 8% of Instagram accounts are spambots. A problem for marketers, sure, but it\u2019s even worse for you. Creating a robot network, or botnet<\/a>, used to involve hacking into thousands of computers and wresting control of them from their unsuspecting owners over a long period of time. Cybercriminals have now discovered an even easier and faster way to create their malicious networks that will carry out their malicious plots: the social botnet.<\/p>\n

Unlike traditional botnets that directly infect computers to create networks, social botnets use social media platforms to create a network of fake profiles linked together to spread malicious links and content. To do this, cybercriminals either create hundreds of profiles themselves or use specially designed software programs to create and multiply false personalities.<\/p>\n

James Foster, a longtime cybersecurity pro, has an excellent breakdown<\/a> on social botnets and how they work. According to Foster, there are five distinct ways social botnet \u201cherders\u201d promote their wares. I\u2019ll break down three of the most common\u2014phishing attacks, retweet storms and hashtag hijacking.<\/p>\n

Phishing Attacks<\/strong><\/h2>\n

Phishing attacks<\/a>, in which cybercriminals pose as a trusted source to trick victims into giving up sensitive information, are often launched via email. Increasingly, however, they\u2019re coming through social channels. This includes Facebook messages or Twitter replies and direct messages. Most people know how to spot these types of phishing messages, but botnet operators play a numbers game; send out thousands of messages on social media platforms and a few unsuspecting users will wind up being snared.<\/p>\n

Retweet Storms <\/strong><\/h2>\n

Another way cybercriminals disseminate malicious links is through retweet storms. In this scenario, a single fake profile will create a post containing a malicious link. Thousands of social bots connected to the profile will then retweet the post to reach the widest audience possible, aiming to lure in unsuspecting victims through the post\u2019s staged popularity.<\/p>\n

Hashtag Hijacks <\/strong><\/h2>\n

Social bots can also be used to infiltrate conversations on social networks centered around trending hashtags. Cybercriminals will command their social bots to create thousands of posts containing the trending hashtag along with a malicious link, knowing that someone will wind up clicking.<\/p>\n

So, how are these social botnets being monetized? The social bot herders mainly make money from the data extracted through their malicious expeditions. They often sell this data to cybercriminal networks, or use the data themselves to access victims\u2019 credit cards or bank accounts. Other times, hackers use the malware installed on computers through a social botnet to create a traditional botnet. They can then rent that botnet out to cybercriminals, or use it themselves to hack into other computer networks.<\/p>\n

Simply put, social botnets are on the rise and there\u2019s little to we can do to stop them at this time. There are, however, tactics you can use to keep yourself safe online:<\/p>\n