312-50V9 · Question #126
A botnet can be managed through which of the following?
The correct answer is A. IRC. IRC (Internet Relay Chat) is the historically primary protocol used by attackers to issue commands to compromised machines in a botnet.
Question
A botnet can be managed through which of the following?
Options
- AIRC
- BE-Mail
- CLinkedin and Facebook
- DA vulnerable FTP server
How the community answered
(43 responses)- A88% (38)
- B7% (3)
- C2% (1)
- D2% (1)
Why each option
IRC (Internet Relay Chat) is the historically primary protocol used by attackers to issue commands to compromised machines in a botnet.
IRC was the original and most common command-and-control (C2) channel for botnets because its real-time chat protocol allows a bot herder to join a private channel and broadcast commands to all infected hosts simultaneously. The protocol is lightweight, widely available, and supports pseudonymous operation, making it ideal for covert botnet management. Early botnets like EggDrop and later malware families like SDBot were built explicitly around IRC-based C2 infrastructure.
While email has been used in some botnet designs for C2 communication, it is not the primary or most common mechanism and is far less efficient than IRC for real-time command broadcasting.
Social media platforms like LinkedIn and Facebook are not standard or reliable botnet C2 channels, as they are easily monitored and accounts are subject to takedown.
A vulnerable FTP server is a target for exploitation or a staging area for malware payloads, not a management channel used to issue commands to a botnet.
Concept tested: Botnet command-and-control via IRC
Source: https://www.cisa.gov/sites/default/files/publications/Botnets_Threat_Overview.pdf
Topics
Community Discussion
No community discussion yet for this question.