March 2026 Law Enforcement Disruption of JackSkid IoT Botnet
Coordinated U.S., German, and Canadian law enforcement actions on March 19, 2026 targeted JackSkid and three other IoT botnets. Court documents attributed…
Tag: DDoS
TuxBot v3 Evolution: LLM-Assisted IoT Botnet
TuxBot v3 Evolution is a modular IoT botnet framework with C-based bot agent, Go-based C2 server, custom exploit VM, and Docker test…
AISURU: Linux IoT Botnet
AISURU is the Linux counterpart of the Kimwolf botnet, focusing on Linux IoT devices. It shares similar DDoS and proxy capabilities, often…
Wuhan Botnet: IoT Malware Lineage
The Wuhan botnet is a malware family that has contributed to the lineage of TuxBot v3 Evolution, providing code and techniques for…
RustDuck: Multi-Device DDoS Botnet
RustDuck hijacks home routers, IP cameras, Android boxes, and poorly secured servers to conduct DDoS attacks, demonstrating the expansion of botnet targets…
Kaitori v3.9: IoT Botnet Variant
Kaitori v3.9 is an IoT botnet variant that shares infrastructure with TuxBot and AISURU, placing the operator within the Keksec ecosystem. It…
I2: WebSocket Flood Generator in npm Proxy Campaign
A module that fetches a target WebSocket URL and socket count from websocket.txt, then opens multiple connections to perform a control-plane DDoS…
U.S. Sanctions First VPN Service and Cryptor Seller for Ransomware Support
The U.S. Treasury Department's OFAC has sanctioned First VPN Service (1VPNS), its Ukrainian administrator Dmytro Rashevskyi, and Belarusian national Yegeniy Vladimirovich Silayev…
RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS
The RustDuck botnet has been rewritten in Rust, targeting routers and servers to launch distributed denial-of-service attacks.
Mirai Botnet Source Code Reused in Evooo1Bot
Mirai is a notorious botnet whose source code was publicly leaked. Evooo1Bot reuses Mirai's DDoS engine while adding advanced features like encrypted…