Back Securityaffairs.Co

Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators

Securityaffairs.Co •Pierluigi Paganini • March 20, 2026

DoJ disrupted IoT botnets’ C2 infrastructure with global partners, targeting operators behind AISURU, Kimwolf, JackSkid, and others. The U.S. DoJ disrupted command-and-control infrastructure used by several IoT botnets, including AISURU, Kimwolf, JackSkid, and Mossad. The operation involved authorities from Canada and Germany, along with major tech companies, to target botnet operators and weaken their global […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

US and Allies Dismantle Major IoT Botnets Behind Record DDoS Attacks On March 20, 2026, the U.S. Justice Department, in collaboration with law enforcement from Canada and Germany, announced the dismantling of four significant botnets: Aisuru, KimWolf, JackSkid, and Mossad. These botnets collectively hijacked over 3 million Internet of Things (IoT) devices, including webcams, digital video recorders, and Wi-Fi routers, to launch distributed denial-of-service (DDoS) attacks. Some attacks peaked at record-breaking rates of 30 terabits per second, targeting various entities, including the Department of Defense's information network. The botnets operated under a 'cybercrime-as-a-service' model, allowing other criminals to rent access to the compromised devices for launching attacks. Victims reported losses amounting to tens of thousands of dollars due to these attacks. The operation involved seizing multiple U.S.-registered internet domains and virtual servers used by the botnets. Authorities emphasized the importance of international cooperation in combating cybercrime. The current status indicates that the botnets' infrastructure has been disrupted, but no arrests have been reported yet. 31 sources 72

Extracted Entities

Global law enforcement operation targets AISURU, Kimwolf, JackSkid botnet operators

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (2)

Malware (3)

MITRE ATT&CK (1)