Terry Zink: A bit more on Rustock
“Rustock is, of course, the largest botnet out there but it depends on how you count it, as I have iterated in the past. If you count by number of unique IPs, then it is the largest botnet by a large margin. If you count by the number of email envelopes, it is still the largest by a large margin. However, each email envelope can have multiple recipients (receivers on the RCPT TO). If you count the each recipient as 1 message, then Rustock is the second largest botnet, trailing Lethic by a large margin.”


