The Lethic Botnet (initially discovered around 2008) is a botnet consisting of an estimated 210 000 - 310 000 individual machines [1] which are mainly involved in pharmaceutical and replica spam.
The botnet was most prevalent in Europe, India and Southeast Asia.
[2] Around early January 2010 the botnet was dismantled by Neustar employees, who contacted various Lethic internet service providers in a bid to take control of the botnet's command and control servers.
[3][4][5][6] This move temporarily caused the botnets' spam to decrease to a trickle of its original volume.
[7] In February 2010 the owners of the botnet managed to re-establish control over the botnet, through the use of new command and control servers located in the United States.