Record-breaking 31.4 Tbps DDoS attack hits in November 2025, stopped by Cloudflare

**Record 31.4 Tbps DDoS by AISURU/Kimwolf (Nov 2025):** Cloudflare reported a hyper‑volumetric DDoS peak of 31.4 Tbps lasting 35 seconds attributed to the AISURU/Kimwolf botnet family; Kimwolf is an Android/TurboMirai‑style botnet that has allegedly infected ~1.8M devices and issued ~1.7B DDoS commands. The botnet supports UDP/TCP/GRE floods, proxying, reverse shells, and uses techniques like DNS-over-TLS, ECC-signed C2 commands, simple stack XOR obfuscation and EtherHiding; attacks disrupted ISPs and targeted telcos, gaming and AI services while originating from thousands of networks including major cloud providers. Cloudflare notes a rapid increase in attack frequency and size in 2025 and provides mitigations and a DDoS threat feed to help identify abusive IPs.