Kimwolf v7 Android Botnet Uses HTTP/2 to Evade DDoS Detection
Cybersecurity researchers have uncovered a new version of the Kimwolf/AISURU Android and IoT botnet, tracked as Kimwolf v7, which introduces significant enhancements…
Tag: IoT botnet
Dysphoria IoT Botnet Adopts Blockchain C2 and Victim Relays After JackSkid Takedown
The Dysphoria IoT botnet, tracked by CNCERT and XLab (Qi'anxin), has evolved to use blockchain-based name services and infected-device relays following a…
JackSkid IoT Botnet Disrupted in March 2026 Law Enforcement Operation
JackSkid was one of four IoT botnets targeted in coordinated U.S., German, and Canadian law enforcement actions on March 19, 2026. Court…
Dysphoria IoT Botnet with Blockchain C2 and Victim Relays
Dysphoria is an IoT botnet tracked by CNCERT and XLab. It evolved after the JackSkid disruption to use ENS and SNS for…
CNCERT: China’s National Computer Network Emergency Response Technical Team
CNCERT is China's national computer emergency response team. It jointly tracks the Dysphoria IoT botnet with XLab and published analysis on its…
XLab: Threat Intelligence Lab of Qi’anxin
XLab is the threat-intelligence lab of Chinese cybersecurity firm Qi'anxin. It published the July 25 analysis of Dysphoria's evolution, including ENS/SNS resolution…
NICT: Japan’s National Institute of Information and Communications Technology
NICT independently documented the JackSkid-to-ENS/SNS shift in May 2026 and found code and strings shared with several other botnet families.
March 2026 Law Enforcement Disruption of JackSkid IoT Botnet
Coordinated U.S., German, and Canadian law enforcement actions on March 19, 2026 targeted JackSkid and three other IoT botnets. Court documents attributed…
TuxBot v3 Evolution: LLM-Assisted IoT Botnet Framework Uncovered by Unit 42
Cybersecurity researchers at Palo Alto Networks Unit 42 have disclosed a previously unreported IoT botnet framework named TuxBot v3 Evolution, which shows…
Keksec: IoT Botnet Ecosystem Operator
Keksec is a cybercriminal group known for running multiple IoT botnet variants in parallel, including TuxBot, Kaitori, and AISURU. They operate a…