Aisuru Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
59
occurrences
First Seen
November 17, 2025
Last Seen
July 16, 2026

Aisuru is a malware family tracked across 16 threat clusters and 59 intelligence report mentions on ThreatCluster. First observed November 17, 2025; most recent activity July 16, 2026.

Related Threat Clusters

  • Google and FBI Disrupt NetNut Proxy Network Linked to 2 Million Devices

    On July 3, 2026, Google, in coordination with the FBI and other partners, disrupted the NetNut residential proxy network, also known as the Popa botnet. This operation targeted over 2 million compromised consumer…

    54 articles · Updated July 2, 2026
  • US and Allies Dismantle Major IoT Botnets Behind Record DDoS Attacks

    On March 20, 2026, the U.S. Justice Department, in collaboration with law enforcement from Canada and Germany, announced the dismantling of four significant botnets: Aisuru, KimWolf, JackSkid, and Mossad. These botnets…

    31 articles · Updated March 20, 2026
  • Aisuru Botnet Drives One-Third of Global DDoS Attacks in 2026

    Arelion's 2026 DDoS report reveals that the Aisuru botnet is responsible for approximately 33% of global DDoS attack traffic. The botnet, which utilizes over 500,000 compromised IoT and Android devices, has led to…

    7 articles · Updated July 15, 2026
  • Google API Key Vulnerability Exposes Gemini AI Access in Android Apps

    A vulnerability in Google's API key system has allowed unauthorized access to the Gemini AI platform from numerous Android applications. CloudSEK identified that existing API keys, meant for public services,…

    2 articles · Updated April 10, 2026
  • TuxBot v3 Evolution: New Modular IoT Botnet Leveraging LLM Technology

    The TuxBot v3 Evolution is a newly discovered IoT botnet framework that targets a wide range of internet-connected devices, including ARM, MIPS, x86_64, PowerPC, and RISC-V architectures. It is designed for mass…

    5 articles · Updated July 16, 2026
  • Jacob Butler Arrested for Operating KimWolf DDoS Botnet

    Jacob Butler, a 23-year-old from Ottawa, Canada, was arrested for operating the KimWolf DDoS botnet, which infected over 2 million devices worldwide. The botnet utilized a DDoS-for-hire model, launching more than 25,000…

    22 articles · Updated May 21, 2026
  • Mastodon's flagship server suffers major DDoS attack, disrupting service

    Mastodon's flagship server, mastodon.social, experienced a severe DDoS attack on April 20, 2026, which temporarily rendered the site inaccessible to many users. The attack involved a flood of malicious web traffic that…

    6 articles · Updated April 20, 2026
  • Cloudflare Outage Disrupts Major Websites and Apps

    A significant outage at Cloudflare has resulted in numerous major websites and applications going offline. The incident has particularly impacted financial services firms that rely on Cloudflare's network and security…

    36 articles · Updated November 18, 2025
  • DigiCert Reports Record DDoS Attacks on UltraDNS in December 2025

    DigiCert experienced a significant increase in distributed denial-of-service (DDoS) attacks targeting its UltraDNS service, with incidents escalating from 18 in November to 176 in December 2025. Overall DDoS attacks…

    30 articles · Updated February 6, 2026
  • Microsoft Azure Faces 15.7 Tbps DDoS Attack from Aisuru Botnet

    Microsoft Azure was targeted by a DDoS attack reaching 15.72 Tbps, launched from over 500,000 IP addresses by the Aisuru botnet. The attack utilized high-rate UDP floods, specifically targeting a public IP address in…

    22 articles · Updated November 17, 2025

Recent Intelligence Reports

  • Read the full report here for more information. — edge.prnewswire.com · July 16, 2026
  • New TuxBot v3 Evolution IoT botnet framework shows signs of AI development — Feeds.Feedburner · July 16, 2026
  • Arelion's 2026 DDoS report shows Aisuru botnet responsible for nearly one third of DDoS attacks — Aol · July 15, 2026
  • Arelion's 2026 DDoS report shows Aisuru botnet responsible for nearly one third of DDoS attacks — Prnewswire · July 15, 2026
  • Disrupting Largest Residential Proxy Network — cloud.google.com · July 11, 2026
  • Canadian Arrested for Operating KimWolf DDoS IoT Botnet — Technadu · May 22, 2026
  • Canada's Jacob Butler arrested by international authorities, charged with KimWolf DDoS ... — Gazettengr · May 22, 2026
  • US and Canada arrest and charge suspected Kimwolf botnet admin — Bleepingcomputer · May 22, 2026

CVSS v3.1 Breakdown