That might be outdated in many cases. Botnet operators usually are infrastructure providers nowadays. Hardly anyone operates and uses a botnet at the same time. Usually you have a very professional group who create and run the botnet, and they then rent it out to another person or group who then actually use the botnet.

Getting caught is also not really the issue at hand, we are talking about counter-hacking against hackers operating from countries that don’t care about what these hackers are doing. Can’t rely on e.g. russian police to bust a group of russian hackers who hack US companies.

So finding these hackers is hardly of help, and hacking them to destroy their setups or something like that also hardly matters, since they can quickly recreate anything that was destroyed.