You could also automate the backend – set it up so that the botnet could draw on the BTC account to purchase new VPS hosting for its command and control servers, migrate when the old ones get taken down, etc.

Of course, without the creativity to come up with new C&C mechanisms, the pattern of migration and purchases might eventually become predictable enough to stop the botnet.