There's no official rules on this, usually the botnets are named by their developers and renamed by AV developers for marketing purposes. This results in stupi

There's no official rules on this, usually the botnets are named by their developers and renamed by AV developers for marketing purposes. This results in stupid shit like kaiten.c which is a *nix bot from 20 years ago now being known (and detected) as "OSX/Tsunami". This is actually harmful as it makes researching whatever infection you got harder when every AV vendor decides to give a very well known malware a different name.