Perhaps the affected pool owners could post a bounty for the botnet owner's identity...