Joint Operation Disrupts Aisuru, KimWolf, JackSkid, and Mossad Botnets
None
<h2><b>What happened</b></h2><p class="p3">Authorities in the <span class="s2">United States, Germany, and Canada</span> disrupted command-and-control infrastructure used by the <span class="s2">Aisuru</span>, <span class="s2">KimWolf</span>, <span class="s2">JackSkid</span>, and <span class="s2">Mossad</span> botnets, targeting virtual servers, domains, and related systems used to launch large-scale distributed denial-of-service attacks. According to the <span class="s2">U.S. Justice Department</span>, the four botnets collectively infected more than <span class="s2">three million IoT devices</span>, including web cameras, digital video recorders, and Wi-Fi routers, and were used to issue more than <span class="s2">316,000 DDoS attack commands</span>. The operation followed months of activity tied to some of the largest recent DDoS incidents, including the <span class="s2">Aisuru</span> botnet’s <span class="s2">31.4 Tbps</span> record attack in December. Authorities said the botnet operators sold access to other cybercriminals under a cybercrime-as-a-service model, enabling attacks against victims worldwide, including IP addresses owned by the <span class="s2">Department of Defense Information Network</span>.<span class="Apple-converted-space"> </span></p><h2><b>Who is affected</b></h2><p class="p3">Organizations worldwide targeted by the four botnets were affected, including victims hit by extortion-driven DDoS attacks and service disruption campaigns, while millions of compromised IoT devices were used as the attack infrastructure.<span class="Apple-converted-space"> </span></p><h2><b>Why CISOs should care</b></h2><p class="p3">The operation highlights the scale of DDoS infrastructure built from compromised IoT devices and shows how botnet operators continue to commercialize attack capacity for extortion and disruption.<span class="Apple-converted-space"> </span></p><h2><b>3 practical actions</b></h2><ol> <li class="p3"><span class="s2"><b>Review exposure to IoT-based botnet risk.</b></span> Identify internet-facing devices such as cameras, DVRs, and routers that could be abused in botnet activity.<span class="Apple-converted-space"> </span></li> <li class="p3"><span class="s2"><b>Monitor for DDoS extortion patterns.</b></span> The disrupted botnets were used to launch attacks for other cybercriminals under a service model.<span class="Apple-converted-space"> </span></li> <li class="p3"><span class="s2"><b>Track law enforcement and infrastructure takedowns.</b></span> Joint actions like this can reveal active botnet names, tactics, and affected device categories relevant to enterprise defense.</li> </ol><p><i>For more coverage of major incidents and threat activity, explore our reporting on </i><a href="https://cisowhisperer.com/tag/cyberattack/"><span class="s3"><b><i>Cyberattacks</i></b></span></a><i>.</i></p><p>The post <a rel="nofollow" href="https://cisowhisperer.com/joint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets/">Joint Operation Disrupts Aisuru, KimWolf, JackSkid, and Mossad Botnets</a> appeared first on <a rel="nofollow" href="https://cisowhisperer.com/">CISO Whisperer</a>.</p><div class="spu-placeholder" style="display:none"></div><div class="addtoany_share_save_container addtoany_content addtoany_content_bottom"><div class="a2a_kit a2a_kit_size_20 addtoany_list" data-a2a-url="https://securityboulevard.com/2026/03/joint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets/" data-a2a-title="Joint Operation Disrupts Aisuru, KimWolf, JackSkid, and Mossad Botnets"><a class="a2a_button_twitter" href="https://www.addtoany.com/add_to/twitter?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F03%2Fjoint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets%2F&linkname=Joint%20Operation%20Disrupts%20Aisuru%2C%20KimWolf%2C%20JackSkid%2C%20and%20Mossad%20Botnets" title="Twitter" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_linkedin" href="https://www.addtoany.com/add_to/linkedin?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F03%2Fjoint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets%2F&linkname=Joint%20Operation%20Disrupts%20Aisuru%2C%20KimWolf%2C%20JackSkid%2C%20and%20Mossad%20Botnets" title="LinkedIn" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_facebook" href="https://www.addtoany.com/add_to/facebook?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F03%2Fjoint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets%2F&linkname=Joint%20Operation%20Disrupts%20Aisuru%2C%20KimWolf%2C%20JackSkid%2C%20and%20Mossad%20Botnets" title="Facebook" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_reddit" href="https://www.addtoany.com/add_to/reddit?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F03%2Fjoint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets%2F&linkname=Joint%20Operation%20Disrupts%20Aisuru%2C%20KimWolf%2C%20JackSkid%2C%20and%20Mossad%20Botnets" title="Reddit" rel="nofollow noopener" target="_blank"></a><a class="a2a_button_email" href="https://www.addtoany.com/add_to/email?linkurl=https%3A%2F%2Fsecurityboulevard.com%2F2026%2F03%2Fjoint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets%2F&linkname=Joint%20Operation%20Disrupts%20Aisuru%2C%20KimWolf%2C%20JackSkid%2C%20and%20Mossad%20Botnets" title="Email" rel="nofollow noopener" target="_blank"></a><a class="a2a_dd addtoany_share_save addtoany_share" href="https://www.addtoany.com/share"></a></div></div><p class="syndicated-attribution">*** This is a Security Bloggers Network syndicated blog from <a href="https://cisowhisperer.com">CISO Whisperer</a> authored by <a href="https://securityboulevard.com/author/0/" title="Read other posts by Evan Rowe">Evan Rowe</a>. Read the original post at: <a href="https://cisowhisperer.com/joint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets/?utm_source=rss&utm_medium=rss&utm_campaign=joint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets">https://cisowhisperer.com/joint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets/?utm_source=rss&utm_medium=rss&utm_campaign=joint-operation-disrupts-aisuru-kimwolf-jackskid-and-mossad-botnets</a> </p>