Kimwolf is a malware family tracked across 18 threat clusters and 58 intelligence report mentions on ThreatCluster. First observed December 18, 2025; most recent activity July 15, 2026.
On July 3, 2026, Google, in coordination with the FBI and other partners, disrupted the NetNut residential proxy network, also known as the Popa botnet. This operation targeted over 2 million compromised consumer…
In early March 2026, Russian companies experienced a significant wave of distributed denial-of-service (DDoS) attacks, involving over 4 million devices, primarily driven by the Kimwolf botnet. The attacks peaked on…
On March 20, 2026, the U.S. Justice Department, in collaboration with law enforcement from Canada and Germany, announced the dismantling of four significant botnets: Aisuru, KimWolf, JackSkid, and Mossad. These botnets…
Arelion's 2026 DDoS report reveals that the Aisuru botnet is responsible for approximately 33% of global DDoS attack traffic. The botnet, which utilizes over 500,000 compromised IoT and Android devices, has led to…
Cybercriminals are increasingly leveraging generative AI to enhance their operations, as detailed in Lumen's 2026 Threatscape Report. This new approach allows attackers to rotate IP addresses and domain names rapidly,…
A recent analysis revealed that 2,058 out of 6,038 apps on LG webOS and Samsung Tizen platforms contain residential proxy SDKs, which allow these apps to monetize users' internet traffic. The study found that 42.5% of…
Jacob Butler, a 23-year-old from Ottawa, Canada, was arrested for operating the KimWolf DDoS botnet, which infected over 2 million devices worldwide. The botnet utilized a DDoS-for-hire model, launching more than 25,000…
Mastodon's flagship server, mastodon.social, experienced a severe DDoS attack on April 20, 2026, which temporarily rendered the site inaccessible to many users. The attack involved a flood of malicious web traffic that…
The 'Kimwolf' botnet has compromised millions of TV boxes and similar devices, posing a severe threat to global internet security. Cybersecurity experts report that these devices are infected with malware and are now…
A major global cyberattack has been linked to a botnet named Kimwolf, primarily composed of compromised Android-enabled televisions and TV streaming devices. Irish consumers have been warned that millions of low-cost,…