The Storm botnet became legend thanks, in part, to its impenetrable, unknowable command and control structure. But researchers have discovered the botnet's Achilles' heel.

Researchers Infiltrate and 'Pollute' Storm Botnet - Dark Reading

The researchers, from the University of Mannheim and the Institut Eurecom, recently infiltrated Storm to test out a method they came up with of analyzing and disrupting P2P botnets. Their technique is a spinoff of traditional botnet tracking, but with a twist: it not only entails capturing bot binaries and infiltrating the P2P network, but it also exploits weaknesses in the botnet’s P2P protocol to inject “polluted” content into the botnet to disrupt communication among the bots, as well as to study them more closely. The researchers tested their pollution method out on Storm -- and it worked. They presented their research this month at Usenix.
To continue the Storm buzz...