Fast-flux Service Networks
Thorsten Holz of the German Honeynet Project has posted a very interesting article describing the methods used by botnet owners to hide command and control servers. I’ve seen much of it in the wild myself, confirming the techniques described in the whitepaper.