
318 ◾ Cyber Fraud: Tactics, Techniques, and Procedures
when the command “http.speedtest” is issued to a PhatBot, the bot performs a speed test.
To determine the bandwidth available, the bot posts a large number of packets to Web sites,
such as:
www.st.lib.keio.ac.jp ◾
www.lib.nthu.edu.tw ◾
www.stanford.edu ◾
www.xo.net ◾
www.utwente.nl ◾
www.schlund.net ◾
ese kinds of tests enable the bot master to determine the speed, bandwidth at which the bot
can send out packets, and thus judiciously group the bot with similarly powered bots.
The DDoS Players
Any botnet typically consists of:
Bot Master or Bot Herder (a human being) ◾
“Stepping Stones” (compromised ...