1. A method for detecting at least one Botnet, comprising: identifying a plurality of candidate Bots; analyzing network traffic of said plurality candidate Bots to identify a plurality suspect controllers; classifying said plurality of candidate Bots into at least one group; and identifying members of each of said at least one group that are connected to a same controller from said plurality suspect controllers, where said members are identified to be part of a Botnet.