We all want fame. When it comes to social media, the fame greedy people can do anything to get likes and followers. They don’t even mind to pay money to buy fake likes, allowing the cybercriminals to earn money by offering fake likes using hijacked IoT botnets.
After the massive DDoS attack on DNS service provider Dyn, it was found that a major part of the attacking systems possibly is formed of hijacked IoT devices from homes. Smart devices such as baby monitors, Wi-Fi cameras, and thermostats are easy to hijack and can be used to barrage the Dyn servers. That results in overloading of major websites and reducing the speed of the internet.
However, not all the high-profile attacks are not run by botnets that cyber criminals use to set up. As GoSecure reports, the Linux/Moose botnet isn’t meant to target people or attempt DDoS attack. Companies that sell fake social media followers and likes, especially Instagram, send account request and follow/like the users who pay for it using this botnet.
Currently, the rate is $112.67 for 10,000 fake followers in Instagram and $158.99 for 10,000 likes on the service. The GoSecure team found that Linux/Moose botnet set up the fake accounts using IoT home routers when they reverse engineered it. And, it could earn $700,000 per month by selling tons of fake accounts and likes.
“It looks legitimate. The criminals make money and they probably declare taxes on it, but it’s all happening on a botnet,” Oliver Bilodeau, GoSecure’s cybersecurity research head told International Business Times U.K. “There’s no direct victims to the crime. This is the next thing the criminals are moving to because there’s a low risk of getting caught and even if they do get caught, the damages would be complicated to explain to the judge. It’s a very clever scheme, quite a perfect cybercrime.”
The social media networks eventually detect and flag those fake followers and likes generated by botnets as spam. So, if you’re planning to buy fake likes and followers for your business, think again.