logo

Lumen disrupts AISURU and Kimwolf botnet by blocking over 550 C2 servers

ID: 5cd37420-8a14-579d-86eb-5d5c28a09411

STIX ID: report--5cd37420-8a14-579d-86eb-5d5c28a09411

Feed Name: Security Affairs

Threat Score
80/100

Date Published: 2026-01-15

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

Lumen Black Lotus Labs disrupted the AISURU/Kimwolf botnet infrastructure by null-routing over 550 command-and-control servers tied to large-scale DDoS and proxy abuse operations; the report details the botnets’ capabilities (UDP/TCP/GRE floods, proxy forwarding, reverse shells), scale (millions of infected devices and terabit-scale attacks), infection vectors (vulnerable residential proxies, Android TV boxes), and ongoing mitigation efforts.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.