Yeah, I thought he was talking about the botnet and had concluded it was LE spyware. I've seen no evidence of that. Some blog post claimed to have identified the malware in the botnet attack, and there was no indication it was LE related.