CowboyRobot writes "After years of nurturing a botnet from a coding exercise into a powerful tool/weapon, attackers must be careful how they use the botnet so that it's not detected. One fingerpringt that attackers can leave behind comes from usage of domain-generation algorithms (DGA). Detection of this is not difficult and so its usage by attackers shows how serious they are as they balance between strengthening their network and exposing it to detection. Peer-to-peer botnets leave even more distinctive fingerprints and expose themselves even more by frequently connecting to peers. "Attackers focused on cyberespionage and covert operations — known in the defense industry as the "advanced persistent threat," or APT — create stealthy malware that focuses on deniability over dollars."" Link to Original Source
The herd instinct among economists makes sheep look like independent thinkers.