Signal
International operation disrupts four large IoT botnets behind record DDoS attacks
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-03-20 07:32 UTCUpdated 2026-03-20 19:54 UTC
rss
cveexploitsbreachesmalwarethreat_actorsadvisories
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.4 top sources shown
Overview
A coordinated law enforcement effort involving the US, Canada, and Germany has dismantled the infrastructure of four major IoT botnets—Aisuru, Kimwolf, JackSkid, and Mossad—that collectively hijacked around three million devices.
Entities
CloudflareAisuruKimwolfJackSkidMossad
Score total
1.66
Momentum 24h
7
Posts
7
Origins
7
Source types
1
Duplicate ratio
0%
Why now
- The botnets were recently active and responsible for record-breaking DDoS attacks exceeding 30 Tbps.
- Authorities seized infrastructure and domains in a coordinated operation involving multiple countries.
- Experts warn operators may regroup with enhanced AI capabilities, necessitating ongoing vigilance.
Why it matters
- Disrupting major IoT botnets reduces the scale of global DDoS attacks and cyber extortion threats.
- The takedown protects millions of devices from being exploited for malicious purposes.
- Highlights the importance of international cooperation in combating cybercrime.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: high
Recurring claims
- Four large IoT botnets—Aisuru, Kimwolf, JackSkid, and Mossad—were disrupted by international law enforcement.
- The botnets hijacked around three million devices and launched over 300,000 DDoS attacks, including record-breaking traffic floods exceeding 30 terabits per second.
- The Kimwolf botnet infected more than two million Android TV devices by exploiting residential-proxy networks.
How sources frame it
- SC Media: neutral
This coordinated takedown of four major IoT botnets marks a significant disruption in large-scale DDoS attack capabilities, underscoring the ongoing threat posed by poorly secured IoT devices and the evolving tactics...
All evidence
All evidence
US, Canada and Germany take down four large DDoS botnets
SC Media · scworld.com · 2026-03-20 19:54 UTC
US seizes domains and infrastructure used in sprawling botnet campaigns
The Record (Recorded Future News) · therecord.media · 2026-03-20 14:25 UTC
Justice Department disrupts botnet networks that hijacked 3 million devices
CyberScoop · cyberscoop.com · 2026-03-20 14:19 UTC
Feds disrupt monster IoT botnets behind record-breaking DDoS attacks
The Register Security · go.theregister.com · 2026-03-20 13:07 UTC
DDoS-Attacken: Schlag gegen internationale Cyberkriminelle
CSO Online · csoonline.com · 2026-03-20 11:43 UTC
Authorities disrupt four IoT botnets behind record DDoS attacks
Help Net Security · helpnetsecurity.com · 2026-03-20 10:38 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 6Origin domains: 6Duplicates: -
Showing 6 / 0
Top publishers (this list)
- SC Media (1)
- The Record (Recorded Future News) (1)
- CyberScoop (1)
- The Register Security (1)
- CSO Online (1)
- Help Net Security (1)
Top origin domains (this list)
- scworld.com (1)
- therecord.media (1)
- cyberscoop.com (1)
- go.theregister.com (1)
- csoonline.com (1)
- helpnetsecurity.com (1)