JackSkid Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
20
occurrences
First Seen
March 20, 2026
Last Seen
May 22, 2026

JackSkid is a malware family tracked across 3 threat clusters and 20 intelligence report mentions on ThreatCluster. First observed March 20, 2026; most recent activity May 22, 2026.

Related Threat Clusters

  • US and Allies Dismantle Major IoT Botnets Behind Record DDoS Attacks

    On March 20, 2026, the U.S. Justice Department, in collaboration with law enforcement from Canada and Germany, announced the dismantling of four significant botnets: Aisuru, KimWolf, JackSkid, and Mossad. These botnets…

    31 articles · Updated March 20, 2026
  • Jacob Butler Arrested for Operating KimWolf DDoS Botnet

    Jacob Butler, a 23-year-old from Ottawa, Canada, was arrested for operating the KimWolf DDoS botnet, which infected over 2 million devices worldwide. The botnet utilized a DDoS-for-hire model, launching more than 25,000…

    22 articles · Updated May 21, 2026
  • Mastodon's flagship server suffers major DDoS attack, disrupting service

    Mastodon's flagship server, mastodon.social, experienced a severe DDoS attack on April 20, 2026, which temporarily rendered the site inaccessible to many users. The attack involved a flood of malicious web traffic that…

    6 articles · Updated April 20, 2026

Recent Intelligence Reports

  • Canadian Arrested for Operating KimWolf DDoS IoT Botnet — Technadu · May 22, 2026
  • Canada's Jacob Butler arrested by international authorities, charged with KimWolf DDoS ... — Gazettengr · May 22, 2026
  • US and Canada arrest and charge suspected Kimwolf botnet admin — Bleepingcomputer · May 22, 2026
  • Alleged leader of Kimwolf, a sweeping botnet for cybercriminals, arrested in Canada — Cyberscoop · May 21, 2026
  • Mastodon DDoS Attack Disrupts Flagship Server Temporarily — Technadu · April 21, 2026
  • US, Canada and Germany take down four large DDoS botnets | news — Scworld · March 20, 2026
  • US, allies move to dismantle four high — Cybersecuritydive · March 20, 2026
  • US seizes domains and infrastructure used in sprawling botnet campaigns — Therecord.Media · March 20, 2026

CVSS v3.1 Breakdown