DOJ Crushes 4 Botnets Behind 3 Million Infected Devices

DOJ dismantled four major botnets - Aisuru, Kimwolf, JackSkid, and Mossad - responsible for infecting over 3 million devices according to Wired

Many infected devices were consumer IoT products and routers inside networks, turning everyday gadgets into weapons for record-breaking DDoS attacks

The takedown signals escalating federal action against botnet infrastructure used for cyberattacks-for-hire operations

Security teams should watch for displacement activity as botnet operators migrate to new infrastructure

The US Justice Department just delivered a knockout blow to cybercriminals running four massive botnets that infected more than 3 million devices worldwide. The coordinated takedown of the Aisuru, Kimwolf, JackSkid, and Mossad botnets marks one of the most significant law enforcement actions against distributed denial-of-service infrastructure in recent memory, with many compromised devices lurking inside everyday networks.

The US Justice Department just scored a major win in the ongoing battle against cybercrime infrastructure. Federal authorities dismantled four sprawling botnets - Aisuru, Kimwolf, JackSkid, and Mossad - that had collectively compromised more than 3 million devices, according to department officials . The scale is staggering, and what makes it particularly concerning is where these infected devices lived: inside homes across the globe.

These weren't sophisticated corporate servers or cloud instances. The botnets weaponized everyday consumer devices - smart gadgets, routers, cameras, and IoT products that most people never think twice securing. Once infected, these devices became unwitting soldiers in distributed denial-of-service armies capable of launching record-breaking attacks that could knock entire services offline.

The timing of this takedown isn't coincidental. DDoS-for-hire services have exploded in recent years, with botnet operators renting out attack capacity to anyone willing to pay. The barrier to entry for launching devastating cyberattacks has dropped to practically nothing, turning botnets into a commodity product in underground markets. By taking down four major networks simultaneously, federal authorities are trying to disrupt that ecosystem at scale.

What's particularly notable this operation is the international nature of the infected devices. Botnets don't respect borders - a compromised router in suburban Ohio might be enlisted alongside a hacked security camera in rural Japan to flood targets with traffic. The 3 million device count suggests these networks had truly global reach, making the coordination required for this takedown all the more impressive.