Aisuru, KimWolf Botnets Disrupted in International Operation

No Arrests, But Virtual Servers, IP Addresses Seized and Residencies Searched David Perera (@daveperera) • March 20, 2026

U.S. authorities seized the attack infrastructure responsible for the largest distributed denial of service attack yet recorded in an international police operation that swept up servers underpinning four botnets.

See Also: OnDemand | Transform API Security with Unmatched Discovery and Defense

The KimWolf botnet, likely with the assistance of the Aisuru botnet, in December 2025 launched an attack against content delivery network Cloudflare that reached 31.4 terabits per seconds.

U.S. federal authorities obtained a March 16 search warrant to seize virtual servers and domains used by KimWolf and Aisuru, as well as lesser botnets known as JackSkid and Mossad, which has no relation to the Israeli intelligence service.

The botnets are variants of the Mirai wormable botnet, infamous for a decade of wrangling exposed devices into botnets ...