Hosting company Real Host in the Latvian capital Riga had its Internet connection shut down by TeliaSonera between the night of 31 July and 1 August. The connection was shut down after it emerged that Real Host was base for the infamous botnet Zeus, which presumed to have control over 3.6 million zombie PCs. The Bot network, according to PCweekly, is assumed to be closely linked to “Rock Phish” – a Russian gang that allegedly is behind half the world’s phishing activity.
Real Host was by multiple security experts compared to hosting companies McColo and Atrivo, who also was the center of criminal Internet traffic until they got their connection terminated.
According to PCweekly it may be extremely difficult to find the center of such a large bot network, and it is unclear how many parts of the Zeus-botnet was driven from Riga.