Why is Mirai so cheap to buy?
The Mirai botnet, a notorious malware that has been used to launch some of the largest distributed denial-of-service (DDoS) attacks in history, is surprisingly inexpensive to purchase on the dark web. This raises concerns about the accessibility of powerful cybercrime tools to even novice hackers.
The Mirai Botnet: A Powerful Cybercrime Tool
Mirai is a type of malware that infects internet-connected devices, such as security cameras, routers, and other "Internet of Things" (IoT) gadgets, turning them into a network of bots, or a "botnet." This botnet can then be used to launch massive DDoS attacks, overwhelming target websites and services with an overwhelming amount of traffic, effectively taking them offline.
The Mirai botnet first gained notoriety in 2016 when it was used to launch some of the largest DDoS attacks on record, including an attack that disrupted internet access for much of the eastern United States.
The Low Cost of Mirai
Despite its powerful capabilities, Mirai is surprisingly inexpensive to purchase on the dark web, with prices ranging from as little as $10 to $100 per month, depending on the size of the botnet. This low cost is due to a few key factors:
- Widespread IoT Vulnerabilities: Mirai exploits vulnerabilities in a wide range of IoT devices, making it easy to quickly build a large botnet.
- Open-Source Code: The Mirai source code was released publicly in 2016, allowing anyone to modify and deploy the malware. This has led to the proliferation of Mirai variants, driving down the cost.li>
- Demand for DDoS Services: There is a thriving underground market for DDoS-for-hire services, which has increased the demand for botnets like Mirai. This high demand keeps prices low.
The low cost of Mirai makes it accessible to a wide range of cybercriminals, from experienced hackers to novice attackers. This raises concerns about the potential for more widespread and damaging DDoS attacks in the future.
Addressing the Mirai Threat
To combat the Mirai threat, security experts recommend that IoT device manufacturers improve security measures, users update their devices regularly, and internet service providers implement better DDoS mitigation strategies. Additionally, law enforcement efforts to disrupt the underground DDoS-for-hire market could help drive up the cost of Mirai and similar botnets.
