Kimwolf botnet rebuilt to survive takedowns, researchers say

Palo Alto Networks' Unit 42 reports a new Kimwolf/Aisuru botnet variant that performs stealthy HTTP/2-based DDoS floods impersonating Chrome, and uses the Ethereum Name Service (ENS) plus a Tor fallback for resilient command-and-control; infrastructure analysis points to servers in Russia and the botnet has a recent history of large-scale attacks and partial takedowns.