[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsFDVzSniNzaqQJClnl7n86IZaY8y5gTz1bd2rymBBkI":3},{"article":4,"iocs":33,"watch_terms":46,"solutions":47,"lesson":19},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":22},"c903d7ce-4512-40d7-a552-feaf538008cb","Global Crackdown Dismantles 4 Botnets Behind Major DDoS Attacks","global-crackdown-dismantles-4-botnets-behind-major-ddos-attacks","Global crackdown dismantles Aisuru, KimWolf, JackSkid and Mossad botnets behind major DDoS attack campaigns targeting millions of devices worldwide.","International law enforcement, led by the US DOJ and FBI, successfully shut down four major botnets—Aisuru, KimWolf, JackSkid, and Mossad—that hijacked over 3 million IoT devices to conduct record-breaking DDoS attacks capable of moving 30 Terabits per second. The operation involved seizing domains and servers while leveraging support from major tech companies including Google, Amazon, Cloudflare, and others. Despite the takedown, cybersecurity experts warn that the botnet-as-a-service model remains profitable and active, making similar operations likely to resurface under different names without stronger device security and faster patching.","Law enforcement dismantles four major botnets (Aisuru, KimWolf, JackSkid, Mossad) controlling 3M+ devices.","https:\u002F\u002Fhackread.com\u002Fcrackdown-dismantles-4-botnets-ddos-attacks\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F03\u002Fdismantle-aisuru-kimwolf-jackskid-mossad-botnets-dismantle.jpg","2026-03-23T10:04:34+00:00","2026-03-23T11:00:06.789102+00:00",9,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":17,"icon":19,"name":20,"slug":21},null,"Malware","malware",[23,28],{"category":24},{"id":25,"icon":19,"name":26,"slug":27},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":29},{"id":30,"icon":19,"name":31,"slug":32},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[34,37,40,43],{"type":21,"value":35,"context":36},"Aisuru","Botnet dismantled; issued 200,000+ attack commands",{"type":21,"value":38,"context":39},"KimWolf","Botnet dismantled; issued 25,000+ DDoS commands; targeted firewalled devices",{"type":21,"value":41,"context":42},"JackSkid","Botnet dismantled; launched 90,000 DDoS attacks; targeted firewalled devices",{"type":21,"value":44,"context":45},"Mossad","Botnet dismantled; sent 1,000 DDoS attack commands",[],{"controls":48,"vendors":114},[49,78,85],{"slug":50,"name":51,"problem":52,"products":53},"patch-management","Automated patch management","Known holes get closed in days, not months.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":79,"name":80,"problem":81,"products":82},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[83,84],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},{"slug":86,"name":87,"problem":88,"products":89},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[90,98,106],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-network","Darktrace \u002F NETWORK","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Fhybrid-network","Network detection and response based on learning normal behaviour.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"corelight","Corelight","\u002Fvendor-logos\u002Fcorelight.png","open-ndr","Corelight Open NDR","https:\u002F\u002Fcorelight.com\u002Fplatform\u002F","Network detection and response based on Zeek and Suricata.",[115],{"slug":116,"name":117,"logo_path":118,"roles":119},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png",[120],"reported_by"]