THE US Department of Justice announced an international operation that disrupted several IoT botnets used to launch distributed denial-of-service attacks, including Aisuru, Kimwolf, JackSkid and Mossad. Authorities said the botnets had compromised more than 3 million devices as of March 2026, spanning DVRs, cameras, Wi‑Fi routers and other IoT gear.
The DoJ noted that Aisuru and Kimwolf are closely connected, with Kimwolf described as Aisuru’s Android-focused successor, and that JackSkid and Mossad were also involved in the takedown. According to the DoJ, Aisuru issued over 200,000 DDoS commands and Kimwolf about 25,000, while JackSkid produced 90,000 and Mossad 1,000 commands.
AWS reported that, like Kimwolf, JackSkid used residential proxy networks to grow, and the disruption included seizing multiple internet domains, virtual servers and other infrastructure used by these botnets. Canadian and German authorities conducted their own operations targeting botnet administrators and infrastructure, though it was not stated whether arrests were made.