Cyberscoop
Kimwolf Botnet Infects Over 2 Million Devices via Residential Proxies
First seen 15 Jan 2026, 01:54 UTC
•
•67% similarity
•42.0
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Kimwolf botnet, which emerged from the Aisuru DDoS botnet in August 2025, has rapidly infected over 2 million unofficial Android TV devices. Its operators exploited residential proxy networks for local control, gaining significant attention from security researchers after briefly topping Cloudflare's global domain rankings in late October 2025.
ThreatCluster AI