It could be in Germany until the law was reformed. You were civilly responsible for whatever the botnet did.