AISURU /Kimwolf, a DDoS botnet, has been attributed with a record-setting attack that peaked at 31.4 Tbps and lasted 35 seconds, according to Cloudflare, which automatically detected and mitigated the activity. The attack occurred in November 2025 and is described as part of a rise in hyper-volumetric HTTP DDoS campaigns mounted by the botnet in Q4 2025.
The same botnet has earlier been linked to another campaign codenamed The Night Before Christmas, which began on 19 December 2025 and saw average attack sizes of 4 Tbps, 3 billion packets per second, and 54 requests per second, with maximum rates reaching 9 Bpps, 24 Tbps, and 205 Mrps. Cloudflare’s data also notes that AISURU/Kimwolf has ensnared more than 2 million Android devices, many of which were compromised Android TVs, often via residential proxy networks such as IPIDEA. Google disrupted IPIDEA and acted legally to take down domains used to control devices and proxy traffic, in collaboration with Cloudflare.