For the second year in a row, the number of servers used by attackers to control malware-infected systems increased sharply. For the first time ever, Russia took the top spot among countries hosting the most number of command-and-control servers. Namecheap was once again the most abused domain registrar, with almost 25% of all botnet C2s detected and blocked last year. Spamhaus attributed the increase in Russia to threat actors taking advantage of relatively lax registration procedures among Internet Service Providers.”]
Source: https://www.darkreading.com/attacks-breaches/number-of-botnet-command-control-servers-soared-in-2019