Comment by xyst

So if I wanted to build a botnet, then it would be very easy ;).

Infiltrate vulnerable PHP sites. Install backdoor(s). Secure root access. Patch PHP to lock out script kiddies. Let it sit dormant until you need to launch attack