“In a surprise filing made late Monday, Microsoft said a former technical expert at a Russian antivirus firm was the person responsible for operating the Kelihos botnet, a global spam machine that Microsoft dismantled in a coordinated takedown last year.”
Source: Microsoft: Worm Operator Worked at Antivirus Firm — Krebs on Security