Hacker News Reader

So if I wanted to build a botnet, then it would be very easy ;).

Infiltrate vulnerable PHP sites. Install backdoor(s). Secure root access. Patch PHP to lock out script kiddies. Let it sit dormant until you need to launch attack

View on HN

Indeed this is undoubtedly happening as we speak to untold millions of forgotten sites.

So many scanners scan for various wordpress sites, if they save their results then they can more-or-less immediately build huge botnets.

Reply on news.ycombinator.com