Global botnets affecting 3M devices disrupted

Authorities in the US, Canada and Germany have shut down infrastructure behind four major IoT botnets that hijacked more than 3 million devices worldwide. Tech companies including AWS, Google and Nokia helped investigators trace and seize internet domains, virtual servers and other systems used to run the Aisuru, KimWolf, JackSkid and Mossad botnets. Some of the resulting attacks reportedly hit data rates of up to 30Tb/s.

The operation focused on cutting off the botnets’ command-and-control channels, limiting further infections and blocking compromised devices from being used in future attacks. Many affected devices were everyday consumer products such as DVRs, webcams and Wi‑Fi routers. According to the US Department of Justice, KimWolf and JackSkid were used to sell DDoS-for-hire services, leading to hundreds of thousands of attacks and causing victims to incur losses and cleanup costs in the tens of thousands of dollars.