zombie computer

       computer or personal computer (PC) connected to the Internet and taken over by a computer worm, virus, or other “malware.” Groups of such machines, or botnets (from a combination of robot and network), often carry out criminal actions without their owners' detecting any unusual activity. Over time, however, most zombie computers accumulate so much malware that they become unusable by their owners. Often, the only cure for heavily infected machines is to completely erase the hard drive and reinstall the operating system. There are estimated to be four to eight million zombie computers in the world, with about one-fourth of them located in the United States.

      The most typical use of botnets is for widely disseminating spam (unwanted commercial e-mail), which makes it difficult to determine the original spammer. cybercrime experts believe that 50–80 percent of all spam is generated by botnets. Similarly, botnets are used to transmit phishing scams, which seek to extract personal data from unwary individuals. Occasionally, botnets are used to launch denial of service attacks (denial of service attack) on World Wide Web sites, effectively shutting them down. Although criminals have sometimes tried to extort money from Web site administrators with threats of continual denial of service attacks, such attacks more often are based on some political, environmental, or religious motivation.

      Individual zombie computers have been used to store and transmit child pornography and other illegal materials, which has sometimes resulted in the prosecution of individuals, including minors, who are later shown to be innocent. In an effort to combat botnets, some computer security scientists, such as those associated with the German Honeynet Project, have begun creating fake zombies, which can enter into and interact with members of a botnet in order to intercept commands relayed by their operators. This information can then be used to help find and arrest the “masterminds.”

* * *