By this logic, all malicious JavaScript (obvious example is cryptominers I guess, assuming no JS sandbox escape) is C&C, yeah? As it "instructs site visitors" to do something harmful locally?
If you need to be on the site it’s not a botnet and there is no C&C server coordinating the attack. It‘s just the JS on the site that makes the attack.
Why? I did not visit the site to participate in a DoS attack; yet my machine was coaxed into participating against my will. Whether this is happening in JS or a drive-by download or a browser 0-day is irrelevant.
I do. I said it's existed since 1000 bce with the earliest case being 1550 bce. As in the earliest record is 1550 bce but the practice being more common by 1000 bce. Did you misread what I wrote or am I missing something?
This article reports on the removal of access to the ad archive. No where does it claim the onus is on Google to maintain this data. Most of top level comments here are arguing against a straw man.