And the other shoe drops ...
Our respected colleague, Joe Stewart, has noticed that Storm is now using encryption (albeit trivial) to communicate with its peers. What this means is that Storm bots can only communicate with other Storm bots that know that key. He speculates that this might be a precursor to selling off chunks of the botnet!
This fits perfectly with what we noticed, whereby Storm had been ... vigorous... but was now quiet. It felt, to us, that they were planning/ changing something, and this would make perfect sense.
What this means to everyone is that we can look forward to even _increased_ Storm botnet activity, as other groups try to use it for their various and nefarious purposes.
Interesting times, folks.