A massive new DDoS botnet has already snared 1.8 million devices – here’s what we know about Kimwolf

• Kimwolf, an Android botnet with 1.8 million infected devices, is rapidly evolving using ENS for resilience
• Its code and infrastructure overlap with AISURU, indicating both belong to the same threat group
• AISURU remains one of the most destructive botnets, recently peaking at 29.7 Tbps in DDoS attacks

Cybersecurity researchers have spotted a mjor malicious botnet comprising almost two million devices which is reportedly capable of more than “just” Distributed Denial of Service (DDoS) attacks.

QiAnXin XLab published a new report on Kimwolf, an Android-based botnet that primarily targets TVs, set-top boxes, and tablets. At the moment, it infected roughly 1.8 million devices, mostly in Brazil, India, the U.S., Argentina, South Africa, and the Philippines.