Aisuru, KimWolf & Co.: Cross-border operation against four dangerous botnets

Law enforcement agencies from the USA, Canada, and Germany have in a joint operation “disrupted” the infrastructure of four major botnets used for massive DDoS attacks. This was made public by the public prosecutor's office in Alaska . According to the report, the Federal Criminal Police Office (Bundeskriminalamt, BKA) and the Central and Point Cybercrime North Rhine-Westphalia (Zentral- und Ansprechstelle Cybercrime Nordrhein-Westfalen, ZAC NRW) were among the agencies involved. The authorities reportedly took action against internet domains, virtual servers, and other infrastructure that were allegedly used for the attacks. There is no mention of any arrests in the statement, and law enforcement does not claim that the botnets have been dismantled.

The botnets affected are reportedly Aisuru, KimWolf, JackSkid, and Mossad. Together, they had recently hijacked more than three million IT devices worldwide, hundreds of thousands of them in the USA. These are reportedly various IoT devices, including video recorders, internet cameras, and routers. In some cases, devices that were supposed to be shielded from the internet by a firewall were also impacted. Access to the devices was then rented out under the well-known “Cybercrime as a Service” model. For money, they could be unleashed on victim networks, overwhelming them with countless simultaneous requests. Typically, money is then demanded for the attacks to stop.

This article was originally published in German . It was translated with technical assistance and editorially reviewed before publication.