AISURU/Kimwolf Botnet Launches Record-Setting 31.4 Tbps DDoS Attack

Cloudflare and other researchers linked the AISURU/Kimwolf botnet — reportedly comprising over two million compromised Android devices (notably off‑brand Android TVs) and abusing residential proxy services like IPIDEA — to a record-setting, hyper‑volumetric DDoS campaign that peaked at 31.4 Tbps and included sustained large-scale attacks in late 2025. The report outlines attack metrics (Bpps/Tbps/Mrps), impacted sectors and geographies, the role of trojanized apps and proxy services in expanding the botnet, and mitigation efforts by Cloudflare and Google to disrupt command-and-control and proxy infrastructure.