Hacker News Reader

> Even if it's not link spam, the bots are using comment fields for C&C for botnets

Any examples of this that aren’t just PoCs?

It's very hard to actually demonstrate without a doubt, but a lot of the blog spam you see basically has a very clear numbers station vibe. No links, just fairly obviously machine generated word salad.

It should be as easy as linking a malware sample, no?

I think the spam you’re referring to is usually targeting the “Website” field of Wordpress comments, which turns the username of the commenter into a hyperlink.

I can absolutely confirm that as a thing, but I can't confirm my employment history.

Reply on news.ycombinator.com