Back Therecord.Media

US seizes domains and infrastructure used in sprawling botnet campaigns

Therecord.Media • March 20, 2026

The Justice Department said on Thursday evening that the Aisuru, KimWolf, JackSkid and Mossad botnets were used to target victims with distributed denial-of-service (DDoS) attacks that overloaded websites and made them unreachable.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

US and Allies Dismantle Major IoT Botnets Behind Record DDoS Attacks On March 20, 2026, the U.S. Justice Department, in collaboration with law enforcement from Canada and Germany, announced the dismantling of four significant botnets: Aisuru, KimWolf, JackSkid, and Mossad. These botnets collectively hijacked over 3 million Internet of Things (IoT) devices, including webcams, digital video recorders, and Wi-Fi routers, to launch distributed denial-of-service (DDoS) attacks. Some attacks peaked at record-breaking rates of 30 terabits per second, targeting various entities, including the Department of Defense's information network. The botnets operated under a 'cybercrime-as-a-service' model, allowing other criminals to rent access to the compromised devices for launching attacks. Victims reported losses amounting to tens of thousands of dollars due to these attacks. The operation involved seizing multiple U.S.-registered internet domains and virtual servers used by the botnets. Authorities emphasized the importance of international cooperation in combating cybercrime. The current status indicates that the botnets' infrastructure has been disrupted, but no arrests have been reported yet. 31 sources 72

Extracted Entities

US seizes domains and infrastructure used in sprawling botnet campaigns

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Malware (3)