DOJ Announces Disruption of Four IoT DDoS Botnets
Summary
The DOJ announced disruption of Aisuru, KimWolf, JackSkid and Mossad IoT DDoS botnets, which the article says infected over 3 million devices and issued 316,000+ attack commands. Team Cymru says its infrastructure intelligence supported the operation.
Key points
- The DOJ announced disruption of the Aisuru, KimWolf, JackSkid and Mossad IoT DDoS botnets.
- The article says the botnets infected more than 3 million devices and issued a combined 316,000+ DDoS attack commands.
- The botnets were linked to attacks reaching approximately 30 terabits per second and reportedly targeted the U.S. Department of Defense Information Network.
- The article says the botnets extorted victims and caused organizations tens of thousands of dollars in damages.
- Coordinated actions involved the U.S., Canada, Germany and the Netherlands, with Europol's PowerOFF team described as central to the operation.
- Team Cymru says its passive internet-infrastructure visibility and NetFlow telemetry helped investigators trace botnet command-and-control infrastructure.
Article Details
- Event Type
- Law-enforcement disruption of four IoT DDoS botnets
- Impact
- The U.S. Department of Justice announced the disruption of Aisuru, KimWolf, JackSkid, and Mossad botnets, which the article says infected more than 3 million devices and were responsible for attacks reaching approximately 30 terabits per second. The botnets issued more than 316,000 DDoS attack commands, extorted victims, caused tens of thousands of dollars in damages to organizations, and targeted the U.S. Department of Defense Information Network.
MITRE ATT&CK
Vendors
Countries
Canadathe U.S. Department of Defense Information Network. Coordinated law enforcement actions spanned the U.S., Canada, Germany, and the Netherlands, with EUROPOL's PowerOFF team at the center.GermanyDepartment of Defense Information Network. Coordinated law enforcement actions spanned the U.S., Canada, Germany, and the Netherlands, with EUROPOL's PowerOFF team at the center.NetherlandsInformation Network. Coordinated law enforcement actions spanned the U.S., Canada, Germany, and the Netherlands, with EUROPOL's PowerOFF team at the center.United StatesMarch 19, 2026 - The U.S. Department of Justice announced the disruption of the world's largest IoT DDoS botnets — Aisuru, KimWolf, JackSkid, and Mossad — responsible for record-breaking attacks measuring
Industries
Defensevictims, cost organizations tens of thousands of dollars in damages, and targeted the U.S. Department of Defense Information Network. Coordinated law enforcement actions spanned the U.S., Canada, Germany, and theInternet infrastructureThis is what internet infrastructure intelligence was built for.