A hosted box botnet, is a botnet of compromised web servers, usually using vulnerabilities in CMS on low cost hosted servers. Since last year I had followed an indonesian group which operate this kind of botnet and resell access to theses powned servers.
The amazing thing is that this botnet is self expanding since compromised servers are automatically findings and compromizing other servers.