Threat actors may buy, lease, or rent a network of compromised systems that can be used during targeting. A botnet is a network of compromised systems that can be instructed to perform coordinated tasks. Threat actors may purchase a subscription to use an existing botnet from a booter/stresser service.
This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.