Botnets on the Rise

Botnets on the Rise

According to researchers, there has been an apalling increase in the number of computers clouted with botnets nowadays. Shadowserver Foundation, a group of volunteer watchdogs, reported that for the past three months, botnet attacks has quadrupled. Researchers believe that computers are being infected though SQL injections. A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data, execute administration operations on the database, recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. SQL injection attacks are a type of injection attack, in which SQL commands are injected into data-plane input in order to effect the execution of predefined SQL commands.
Sans researcher John Bambenek stated there are numerous security firms that lack machinery to detect SQL attacks right before they become prevalent. Several security companies such as Symantec, Trend Micro, FireEye, Simplicita and Damballa have announced offerings to stop botnets. However, none has been successful enough to stave off the attacks rather than merely stop them when they have already made huge damages.