Most Mirai forks are disposable. #Jackskid was built not to be.

Joint research with Comcast Threat Research Labs — we tracked this botnet across 80+ samples and 13 build generations as it evolved from a bare-bones prototype into a dual-vector Android TV/IoT platform with triple-layer encryption and DNS-over-HTTPS C2.

Report and IoCs: https://github.com/deepfield/public-research/blob/main/jackskid/report.md

#threatintel #ddos

public-research/jackskid/report.md at main · deepfield/public-research

DDoS botnet research and indicators of compromise from Nokia Deepfield ERT - deepfield/public-research

GitHub

Ich finde es schwierig eine #Malware / ein #Botnet nach dem israelischen Geheimdienst #Mossad zu benennen

#Aisuru, #KimWolf & Co.: Behörden „stören“ vier gefährliche Botnets | Security https://www.heise.de/news/Aisuru-KimWolf-Co-Laenderuebergreifende-Aktion-gegen-vier-gefaehrliche-Botnets-11218668.html #DDoS #CyberCrime #JackSkid

Aisuru, KimWolf & Co.: Behörden „stören“ vier gefährliche Botnets

Über drei Millionen infizierte IT-Geräte wurden zuletzt für besonders mächtige DDoS-Attacken benutzt. Nun gab es angeblich eine Aktion gegen die Infrastruktur.

heise online

RE: https://infosec.exchange/@jmeyer/116259050557048999

ICYMI: a story about pulling one thread linking multiple botnets — four of which were targeted by coordinated law enforcement actions this week, and an adjacent one for which our team publishes the C2 decryption scheme.

#aisuru #kimwolf #mossad #jackskid #cecilio

Feds Disrupt IoT Botnets Behind Huge DDoS Attacks – Krebs on Security

US Takes Down Botnets Used in Record-Breaking Cyberattacks

The Aisuru, Kimwolf, JackSkid, and Mossad botnets had infected more than 3 million devices in total, many inside home networks, according to the US Justice Department.

WIRED

US Takes Down #Botnets Used in Record-Breaking #Cyberattacks

The #Aisuru , #Kimwolf , #JackSkid , and #Mossad botnets had infected more than 3 million devices in total, many inside home networks, according to the US Justice Department.
#doj #privacy #security

https://www.wired.com/story/us-takes-down-botnets-used-in-record-breaking-cyberattacks/

US Takes Down Botnets Used in Record-Breaking Cyberattacks

The Aisuru, Kimwolf, JackSkid, and Mossad botnets had infected more than 3 million devices in total, many inside home networks, according to the US Justice Department.

WIRED

Feds Disrupt #IoT #Botnets Behind Huge #DDoS Attacks

#doj joined authorities in #Canada & #Germany in dismantling the online #infrastructure behind 4 highly disruptive botnets that compromised more than 3 million Internet of Things (IoT) devices, such as #routers & web #cameras. The feds say the 4 botnets — named #Aisuru , #Kimwolf , #JackSkid & #Mossad — are responsible for a series of recent record-smashing DDoS attacks capable of knocking nearly any target offline

https://krebsonsecurity.com/2026/03/feds-disrupt-iot-botnets-behind-huge-ddos-attacks/

Feds Disrupt IoT Botnets Behind Huge DDoS Attacks – Krebs on Security

One custom RC4 seed led us to four botnets, five C2 channels, and a developer who shipped their Windows username and Cursor IDE logs with their malware.

Equal parts cryptography, thread-pulling, and easter eggs.

https://github.com/deepfield/public-research/blob/main/reports/2026-03-20-aisuru-ecosystem.md

#threatintel #Aisuru #kimwolf #jackskid #mossadproxy #cecilio

public-research/reports/2026-03-20-aisuru-ecosystem.md at main · deepfield/public-research

DDoS botnet research and indicators of compromise from Nokia Deepfield ERT - deepfield/public-research

GitHub
Feds Disrupt IoT Botnets Behind Huge DDoS Attacks – Krebs on Security