The Iranian Cyber Army (ICA) is known for defacing websites. Researchers say the group is responsible for a powerful botnet containing more than 400,000 infected computers. The group is adding new ones at the rate of 14,000 every hour. The botnet may have already infected 20 million machines, researchers say. The exact identities of the group are in some dispute, though news reports suggest that the group was formed by Iranian authorities in the wake of mass protests following the disputed June 2009 Iranian presidential elections.”]
Source: https://www.darkreading.com/attacks-breaches/iranian-cyber-army-joins-botnet-business