Back Devdiscourse

International Law Enforcement Cracks Down on Botnet Infrastructure

Devdiscourse • March 20, 2026

Law enforcement agencies across multiple nations have successfully dismantled critical infrastructure powering four major botnets, responsible for infecting over 3 million devices globally.

The operation involved the United States Department of Justice, as well as counterparts from Germany and Canada. These malicious networks—identified as Aisuru, KimWolf, JackSkid, and Mossad—were utilized to execute distributed denial-of-service (DDoS) attacks. Notably, some of the targets included websites affiliated with the U.S. Department of Defense.

German police indicated that investigations have led to the identification of two key administrators connected to these botnets, who will now face legal action. Officers conducted searches in Germany and Canada, seizing considerable evidence, including numerous data storage devices and cryptocurrencies worth tens of thousands. The operation emphasized the significant threat posed by Internet of Things (IoT) devices, often exploited due to lack of security updates. Assistance from major tech companies like Amazon Web Services and Google, along with Europol's PowerOff team, was crucial to this international crackdown.

(With inputs from agencies.)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

US and Allies Dismantle Major IoT Botnets Behind Record DDoS Attacks On March 20, 2026, the U.S. Justice Department, in collaboration with law enforcement from Canada and Germany, announced the dismantling of four significant botnets: Aisuru, KimWolf, JackSkid, and Mossad. These botnets collectively hijacked over 3 million Internet of Things (IoT) devices, including webcams, digital video recorders, and Wi-Fi routers, to launch distributed denial-of-service (DDoS) attacks. Some attacks peaked at record-breaking rates of 30 terabits per second, targeting various entities, including the Department of Defense's information network. The botnets operated under a 'cybercrime-as-a-service' model, allowing other criminals to rent access to the compromised devices for launching attacks. Victims reported losses amounting to tens of thousands of dollars due to these attacks. The operation involved seizing multiple U.S.-registered internet domains and virtual servers used by the botnets. Authorities emphasized the importance of international cooperation in combating cybercrime. The current status indicates that the botnets' infrastructure has been disrupted, but no arrests have been reported yet. 31 sources 72

Extracted Entities

International Law Enforcement Cracks Down on Botnet Infrastructure

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (3)