Overview
- Authorities say a coordinated operation targeted Aisuru, KimWolf, JackSkid and Mossad, removing domains, virtual servers and related infrastructure used for high‑volume DDoS attacks.
- Investigators identified two alleged administrators, executed searches in Germany and Canada, and seized extensive evidence including data drives and five‑figure cryptocurrency holdings.
- Officials reported no detentions and did not declare a full takedown, with further remediation, attribution work and potential prosecutions still underway.
- The botnets collectively infected more than three million devices worldwide, largely vulnerable IoT equipment such as webcams, DVRs and routers as well as Android‑based consumer TV boxes.
- Previous floods of traffic linked to these networks reached roughly 31.4 Tbps and included attacks on public and private targets, with companies such as AWS, Google and Nokia and agencies like Europol assisting the operation.