The federal organization is known to be working on
five cybercrime cases, yielding the 1 million victims and three arrests so far. Despite the FBI's good work, notifying the 1 million customers is going to be far trickier than it sounds, because
Internet Service Providers will have to do it. The agency can hand over IP addresses to ISPs; "If they choose to, they can contact their customers," says Shawn Henry, deputy assistant director of the
FBI's Cyber Division.
There may be a conflict of interest here, as ISPs may not want information about infected computers on their network leaked to the press. That said, the FBI still has to comb through the vast number of IP addresses it's hoisted from the arrested bot herders. If any large companies are involved, they will be notified directly.