Breaches and incidentsBriefReported by a reputable outlet, citing the company
AISURU, Kimwolf, JackSkid and Mossad IoT DDoS botnets disrupted
DOJ announced a court-authorized operation with Canada and Germany (Team Cymru adds the Netherlands and Europol’s PowerOFF) against botnets of 3M+ IoT...
- Disclosed
What happened
- DOJ announced a court-authorized operation with Canada and Germany (Team Cymru adds the Netherlands and Europol’s PowerOFF) against botnets of 3M+ IoT devices behind record attacks of about 30 Tbps (Cloudflare attributed a 31.4 Tbps, 35-second attack in Nov 2025 to AISURU/Kimwolf). Court documents count 200,000+ (AISURU), 90,000+ (JackSkid), 25,000+ (Kimwolf) and 1,000+ (Mossad) DDoS commands. Lumen null-routed about 1,000 C2 servers.
- Status: a later DOJ District of Alaska release (title seen, body not retrieved) reports a Canadian man arrested and charged with administering KimWolf. Cloudflare’s Q3 2026 report (30 Oct) counts 18.2M network-layer attacks (up 38%) with new variants Dysphoria and Evooo1Bot, and hyper-volumetric (>1 Tbps) attacks down 69% from Q2.
Sources
- https://thehackernews.com/2026/03/doj-disrupts-3-million-device-iot.html
- https://www.team-cymru.com/post/team-cymru-doj-iot-ddos-botnet-disruption
- https://thehackernews.com/2026/10/cloudflare-reports-182-million-network.html
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.