A massive new DDoS botnet has already snared 1.8 million devices - here's what we know about Kimwolf

• Kimwolf, an Android botnet with 1.8 million infected devices, is rapidly evolving using ENS for resilience
• Its code and infrastructure overlap with AISURU, indicating both belong to the same threat group
• AISURU remains one of the most destructive botnets, recently peaking at 29.7 Tbps in DDoS attacks

Cybersecurity researchers have spotted a mjor malicious botnet comprising almost two million devices which is reportedly capable of more than “just” Distributed Denial of Service (DDoS) attacks.

QiAnXin XLab published a new report on Kimwolf, an Android-based botnet that primarily targets TVs, set-top boxes, and tablets. At the moment, it infected roughly 1.8 million devices, mostly in Brazil, India, the U.S., Argentina, South Africa, and the Philippines.

How the devices get infected is still unknown, but XLab found the majority of the victims are in residential network environments, and belong to these brands: TV BOX, SuperBOX ...