logo

Millions of Android Powered TVs and Streaming Devices Infected by Kimwolf Botnet

ID: 11bf0457-57df-5eac-adc2-666360bc6dc4

STIX ID: report--11bf0457-57df-5eac-adc2-666360bc6dc4

Feed Name: HackRead

Threat Score
88/100

Date Published: 2026-01-06

Date Updated: 2026-04-22

Author: Deeba Ahmed

...
...

Kimwolf, the Android variant of the Aisuru botnet, has infected millions of Android-powered smart TVs and cheap streaming boxes—often pre-infected out of the box—and is being used as a 2+ million device DDoS-for-hire network (peaking at ~29.7 Tbps). Researchers found widespread global infections (notably Vietnam, Brazil, India, Saudi Arabia), use of a hidden Byteconnect SDK to install apps and monetize devices, and evidence the network cycles through millions of home IPs weekly; although a vendor patch was released, many devices remain compromised.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.