Re: And the next step...
"
What they need to do is to speak to a few of the ISPs and get traffic logs for some of these PCs. Try to work out the command & control addresses
"
The command & control data will almost certainly come from the IP address of a Tor relay. Now what?