Baas: Botnet as a service

“You know what’s cooler than a million compromised hosts? A billion compromised hosts.”

100 Billion Dollars

How much does it cost to buy 10,000 U.S.-based malware-infected hosts?

In this post the security expert Dancho Danchev is profiling a service offering access to malware-infected hosts internationally.

Thanks to the rise of DIY (do it  yourself) underground market propositions, as well as managed services allowing novice cybercriminals to outsource the entire host acquisition, retention through QA (Quality Assurance), and dissemination of malicious campaigns to third-parties offering these capabilities as a service, we expect to see more of these services offering access to malware-infected hosts.

Following is the price list. The purchase of US based U.S.-based infected hosts is most expensive than machines located elsewhere, because of the potential market size for on-line transactions based on the -trust- for US-based IP addresses.

  100 5,000 10,000
World Mix $25.00 $110.00 $200.00
EU Mix $50.00 $225.00 $400.00
DE, CA, GB $80.00 $350.00 $600.00
USA $120.00 $550.00 $1,000.00 

Source: http://blog.webroot.com/2013/02/28/how-much-does-it-cost-to-buy-10000-u-s-based-malware-infected-hosts/