DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks

The U.S. Department of Justice, with international and private-sector partners, disrupted command-and-control infrastructure for four large IoT botnets (AISURU, Kimwolf, JackSkid, Mossad) that had conscripted an estimated ~3 million devices and launched record-breaking DDoS attacks (reported up to ~31.4 Tbps, billions of packets per second). The botnets used a novel technique of abusing residential proxy networks to scale and sell access as cybercrime-as-a-service, were linked to hundreds of thousands of attack commands and extortion campaigns, and prompted coordinated mitigation and takedown efforts.