Cyber Crime and Cyber Terrorism

239
 
A botnet roadmap
PRIMARY ACTIVITIES:
• 
Inbound Logistics:
all the needed logistical activities for the implementation of 
services for sale or rent. Hw & Sw logistics, bulletproof hosting services rental 
and anonymous connectivity.
• 
Operations:
the core business. Develop payloads, customizable crimewares, 
exploit kits and back-end infrastructures for building, hiding and accessing 
C&C servers (maybe hosted on bulletproof domains), malware distribution 
methods/services, etc.
• 
Outbound Logistics:
Hw & Sw for managing secure e-marketing, e-sales and 
e-money transfer infrastructures.
• 
Marketing and Sales: MARKETING:
post on forums, black markets, rate and 
target of success. 
SALES:
sell/rent all is made by Operations.
• 
Services:
Botnet amplitude, steadily updated malware features (Spam, DDOS, 
Exfiltration, etc.).
SUPPORT ACTIVITIES:
• 
Firm Infrastructure:
Labs, C&C server owned, technologies for anonymous 
connectivity and/or VPNs with Countries with poor legislation on cybercrime.
• 
Human Resource Management:
Employees skilled and trusted.
Designers
Users
$$
$$
$$$$
PPI
PPU
$$$$
Victims
FIGURE 17.4
Money flows.

---

240
CHAPTER 17
Responding to cyber crime and cyber terrorism
• 
Technological Development:
Variants to Crimeware SDK or brand new 
payloads, exploit kits, bulletproof C&C host, secure e-payments, secure 
e-marketing.
• 
Procurement:
Forecasting and planning of criminal market requests, secure 
payment systems, trusting and skill assessment procedures for providers and