Correct me if I'm wrong but looks like a marketing stunt, there is nothing "realtime" about it, check the network log. While it's all nice and flashy with nice transitions, there is no way you can follow what's going on. The only information that is readable are country statistics.
Galncing at the source it seems that all the "updates" are just startup number + random value.
(where "1" would be replaced with some time value)
Edit: investigating a bit more, there are 24 URLs for http://cybermap.kaspersky.com/data/events/<H>.json where <H> starts at zero. So you can see if tomorrow the files are all different. It could very well be near-time, maybe with 1 hour of lag/caching.
I feel like it is too quick/busy to be valuable other than to emphasize that there is "a lot" of this going on. After that though, not sure how good it is at conveying any other information that can be acted on. Certainly does look cool.
Crashed my Firefox. There is still much to be done in performance that these visualizations can be used properly and in larger scale. But cool map anyway!
Galncing at the source it seems that all the "updates" are just startup number + random value.