Skip to content
Kimwolf Botnet Infects Over 2 Million Devices via Residential Proxies

Kimwolf Botnet Infects Over 2 Million Devices via Residential Proxies

First seen 15 Jan 2026, 01:54 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

The Kimwolf botnet, which emerged from the Aisuru DDoS botnet in August 2025, has rapidly infected over 2 million unofficial Android TV devices. Its operators exploited residential proxy networks for local control, gaining significant attention from security researchers after briefly topping Cloudflare's global domain rankings in late October 2025.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 182d ago How this analysis works

More articles in this cluster (3)