The tracking (and scope) of GhostNet, a significant example of the use of malware and botnets for espionage.  Some items of this were given in a story in the New York Times.  There is also related work in a report out of Cambridge (full report in PDF)(which, like everything else Ross Anderson has written, is worth reading regardless of your level of interest).




More...