The Washington Post published an
interview with a botnet-builder known as 0x80 who mentions that he's from a small town.
This article included a couple of pictures that were later removed. When checked, the image's
metadata listed the city he was in, which happened to be a small town (of about 3000). Since he indicated some features near where he lives, including a strip club, some people used Google Maps to narrow down where he might live.
Now I'm just waiting for the "he's been arrested" part of the article to show up