{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,26]],"date-time":"2026-03-26T16:23:28Z","timestamp":1774542208150,"version":"3.50.1"},"reference-count":57,"publisher":"IEEE","license":[{"start":{"date-parts":[[2019,11,1]],"date-time":"2019-11-01T00:00:00Z","timestamp":1572566400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,11,1]],"date-time":"2019-11-01T00:00:00Z","timestamp":1572566400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,11]]},"DOI":"10.1109\/ecrime47957.2019.9037600","type":"proceedings-article","created":{"date-parts":[[2020,3,20]],"date-time":"2020-03-20T03:56:40Z","timestamp":1584676600000},"page":"1-11","source":"Crossref","is-referenced-by-count":16,"title":["Assessing the Threat of Blockchain-based Botnets"],"prefix":"10.1109","author":[{"given":"Leon","family":"B\u00f6ck","sequence":"first","affiliation":[{"name":"Technische Universität Darmstadt,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nikolaos","family":"Alexopoulos","sequence":"additional","affiliation":[{"name":"Technische Universität Darmstadt,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Emine","family":"Saracoglu","sequence":"additional","affiliation":[{"name":"Technische Universität Darmstadt,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Max","family":"M\u00fchlh\u00e4user","sequence":"additional","affiliation":[{"name":"Technische Universität Darmstadt,Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Emmanouil","family":"Vasilomanolakis","sequence":"additional","affiliation":[{"name":"Aalborg University,Denmark"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","first-page":"164","article-title":"A survey of attacks on ethereum smart contracts (sok)","author":"atzei","year":"2017","journal-title":"Principles of Security and Trust - 6th International Conference POST 2017 Held as Part of the European Joint Conferences on Theory and Practice of Software ETAPS 2017"},{"key":"ref38","first-page":"218","article-title":"An analysis of bitcoin op_return metadata","author":"bartoletti","year":"2017","journal-title":"Financial Cryptography and Data Security - FC 2017 International Workshops WAHC BITCOIN VOTING WTSC and TA"},{"key":"ref33","article-title":"A case study of the rustock rootkit and spam bot","author":"chiang","year":"2007","journal-title":"First workshop on Hot Topics in Understanding Botnets (HotBots 07)"},{"key":"ref32","year":"2014","journal-title":"U S Leads Multi-National Action Against Gameover Zeus Bot-net and Cryptolocker Ransomware Charges Botnet Administrator"},{"key":"ref31","author":"krebs","year":"2014","journal-title":"Spam Nation The Inside Story of Organized Cybercrime — from Global Epidemic to Your Front Door"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2016.7860489"},{"key":"ref37","article-title":"A quantitative analysis of the impact of arbitrary blockchain content on bitcoin","author":"matzutt","year":"0","journal-title":"Proceedings of the 10th International Conference on Financial Cryptography and Data Security (FC)"},{"key":"ref36","first-page":"1","article-title":"Entelecheia: Detecting P2P botnets in their waiting stage","author":"hang","year":"2013","journal-title":"IFIP Networking Conference 2013"},{"key":"ref35","author":"prince","year":"2012","journal-title":"Flashback botnet updated to include twitter as c&c"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2013.6703693"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.36"},{"key":"ref27","author":"van saberhagen","year":"2013","journal-title":"Cryptonote v 2 0"},{"key":"ref29","article-title":"Russian underground revisited","author":"goncharov","year":"2014","journal-title":"Cybercriminal Underground Economy Series"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3102645"},{"key":"ref1","author":"nakamoto","year":"2008","journal-title":"Bitcoin A Peer-to-Peer Electronic Cash System"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-39757-4_25"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3312614.3312615"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/Cybermatics_2018.2018.00219"},{"key":"ref24","author":"zohar","year":"0","journal-title":"Unblockable Chains"},{"key":"ref23","author":"majid","year":"2017","journal-title":"Botract Abusing Smart Contracts and Blockchains for Botnet Command and Control"},{"key":"ref26","year":"0","journal-title":"The Bitocoin Wiki"},{"key":"ref25","article-title":"Botnet resiliency via private blockchains","author":"sweeny","year":"2017","journal-title":"SANS Institute Information Security Reading Group"},{"key":"ref50","article-title":"F-secure has discovered miniduke malware samples in the wild","author":"paganini","year":"2014"},{"key":"ref51","article-title":"Trojan.whitewell: whats your (bot) facebook status today?","author":"lelli","year":"2009"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2017.7945049"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/IC2E.2018.00070"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/s10723-019-09473-3"},{"key":"ref54","article-title":"Resilient botnet command and control with tor","volume":"18","author":"brown","year":"2010","journal-title":"DEF CON"},{"key":"ref53","author":"matrosov","year":"2013","journal-title":"The Rise of TOR-based Botnets"},{"key":"ref52","author":"guarnieri","year":"0","journal-title":"A Tor-powered botnet straight from Reddit"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23488"},{"key":"ref11","author":"ilascu","year":"2018","journal-title":"New Botnet Hides in Blockchain DNS Mist and Removes Cryptominer"},{"key":"ref40","author":"irinco","year":"2012","journal-title":"The dorkbot rises"},{"key":"ref12","first-page":"1093","article-title":"Understanding the mirai botnet","author":"antonakakis","year":"2017","journal-title":"26th USENIX Security Symposium USENIX Security 2017"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MCOMSTD.2018.1800023"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3297280.3297467"},{"key":"ref15","first-page":"491","article-title":"From throw-away traffic to bots: Detecting the rise of dga-based malware","author":"antonakakis","year":"2012","journal-title":"21th USENIX Security Symposium"},{"key":"ref16","author":"curran","year":"2016","journal-title":"Using the bitcoin blockchain as a botnet resilience mechanism"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2018.8433199"},{"key":"ref18","author":"eisenkraft","year":"2019","journal-title":"Ponys C&C servers hidden inside the Bitcoin blockchain"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4684-4730-9_5"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-017-0379-8"},{"key":"ref3","first-page":"34","article-title":"Zombiecoin: Powering next-generation botnets with bitcoin","author":"ali","year":"2015","journal-title":"Financial Cryptography and Data Security FC 2015 International Workshops BITCOIN WAHC and Wearable"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.17"},{"key":"ref5","article-title":"Using the Blockchain as a C&C for a botnet","author":"roffel","year":"2014"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CYCON.2014.6916408"},{"key":"ref7","first-page":"511","article-title":"Next generation P2P botnets: Monitoring under adverse conditions","author":"b\u00f6ck","year":"2018","journal-title":"Research in Attacks Intrusions and Defenses - 21st International Symposium RAID 2018"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.01.004"},{"key":"ref9","year":"2018","journal-title":"Twitter is sweeping out fake accounts like never before putting user growth at risk"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2016.7510885"},{"key":"ref45","article-title":"ZeroAccess Indepth","author":"neville","year":"2013","journal-title":"Symantec security report"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2815675.2815682"},{"key":"ref47","author":"vasilomanolakis","year":"2017","journal-title":"I trust my zombies A trust-enabled botnet"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2076450.2076456"},{"key":"ref41","first-page":"1","article-title":"Post-mortem of a zombie: Conficker cleanup after six years","author":"asghari","year":"2015","journal-title":"24th USENIX Security Symposium USENIX Security 15"},{"key":"ref44","article-title":"Sality: Story of a peer-to-peer viral network","author":"falliere","year":"2011","journal-title":"Symantec Corporation Tech Rep"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2008.4690854"}],"event":{"name":"2019 APWG Symposium on Electronic Crime Research (eCrime)","location":"Pittsburgh, PA, USA","start":{"date-parts":[[2019,11,13]]},"end":{"date-parts":[[2019,11,15]]}},"container-title":["2019 APWG Symposium on Electronic Crime Research (eCrime)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9028045\/9037499\/09037600.pdf?arnumber=9037600","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,20]],"date-time":"2025-08-20T18:38:33Z","timestamp":1755715113000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9037600\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,11]]},"references-count":57,"URL":"https:\/\/doi.org\/10.1109\/ecrime47957.2019.9037600","relation":{},"subject":[],"published":{"date-parts":[[2019,11]]}}}