Calliope is a forensics detective with a law enforcement agency. She discovers that an attacker who has just been caught was using a dead-drop method of controlling the bots in a botnet. Which of the following might have been a clue that the attacker was using this method?
A) Reading log files that contained constant encrypted communications from the attacker's IP address to some of the identified bots
B) Finding a directional antenna and Wi-Fi setup that allowed the bot herder to beam communications directly to the target computers
C) Finding devices that the attacker had hidden on multiple victims' company networks
D) Finding an e-mail account with multiple saved drafts that were never sent but contained instructions the bots were to follow

Question

Quizplus · Accepted Answer

The dead-drop method in cyber attacks involves leaving messages or data in a passive location where they can be picked up by others without direct communication. An e-mail account with unsent drafts containing instructions is a classic example of this technique, as it allows bots to access the instructions without requiring direct communication from the attacker, thereby reducing the risk of detection.

Calliope Is a Forensics Detective with a Law Enforcement Agency