Since July, researchers have been tracking a new variant of Pushdo, which is mixing command-and-control traffic with bogus HTTP requests to legitimate sites with the goal of evading detection.
While Dutch law enforcement managed to shut down two C&C servers, the Grum botnet is still active. And if its controllers are so inclined, they can continue to deliver spam.