100,000 node botnet

This is interesting. A few days ago, authorities in the Netherlands arrested three men accused of running a 100,000 node botnet using W32.Toxbot. The Symantec advisory says this:

  • Number of infections: 0 – 49
  • Number of sites: 0 – 2
  • Geographical distribution: Low
  • Threat containment: Easy
  • Removal: Easy
  • So it appears to be either 100,000 nodes or "0-49". At least they are close ;-)