Paper’s purpose – to show how Tor is used by cyber criminals to run and hide their botnets. An introduction to Tor What is a botnet ? How I came across this concept How most botnets are taken down A history of botnet traffic on Tor What is a Tor hidden service ? Pro’s and Con’s of using a hidden service for a botnet Setting up a HTTP botnet (running on LAMP) with Tor hidden service in a Ubuntu machine Demonstration Answering queries I will also be dealing with a real life case of how helped I trace a TOR botnet.