A video interview and Q&A with IoT specialist Dan Demeter of Kaspersky Lab. Demeter: Pushing out an update to infected machines might be illegal because it would constitute tampering with the code on machines. He says his team introduced a new peer into the botnet and persuaded the peers to view the new peer as very popular. The attack group shows a moderate level of sophistication, but the stage is set for MuddyWater to take things to the next level. If your contract with your ISP says that “If you are propagating viruses we may automatically clean your machine or kick you off the network”””
Source: https://threatpost.com/botnet-takedown-researcher-describes-how-kelihos-fell-092911/75704/