And to be even more pessimistic, cutting off Russia's Internet would do nothing to stop these, because these botnets can be set up by viruses, which can in turn be initially spread by just dropping random infected USB sticks on the street in other countries. No need for a Russian-IP-hosted CNC coordinating the attack.