I get a sentence:

If an attack is created using a botnet the likelihood of tracking the attack back to its source is low. For an added level of obfuscation, an attacker may have each distributed device also spoof the IP addresses from which it sends packets. If the attacker is using a botnet such as the Mirai botnet, they generally won’t care about masking the IP of the infected device.

Why attacker do not care about masking the IP of the infected device of botnet?

  • 1
    where is the quote from? Always cite your sources.
    – schroeder
    Mar 25, 2020 at 18:01

1 Answer 1


Infected devices are not owned by the attacker. So, it doesn't matter to the attacker if the bots are found.

Mirai was so successful that if a device was found, the attacker could simply get another.

Other botnets might be carefully controlled and tended by the attacker. They might be difficult or costly to maintain or to add new bots. In these cases, the attacker would want to protect it as much as feasible.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .