threatpost: Lessons From the Rustock Takedown

“Having taken a closer look at the specifics of the Rustock botnet – e.g. the CnC infrastructure, the criminals operating patterns, the DNS structure and domain registrations, malware evolution and dissections, etc. – it’s likely that this particular botnet has been beheaded and unlikely that the botnet operators will be able to regain control anytime soon (without exposing themselves).”