Tag: ddos
-
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet these devices usually end up in. QiAnXin’s XLab calls it AryStinger and counts at least 4,300 infected routers, a total it says is still rising.The distinction matters. AryStinger exists for the stage of an attack…
-
Gcore Helps Ucom Safeguard Public Live Broadcast Infrastructure During Armenia’s Parliamentary Elections
Luxembourg, Luxembourg, June 19th, 2026, CyberNewswire Gcore’s Network Layer DDoS Protection helped Ucom maintain service continuity and operational readiness for critical public-facing broadcast services Gcore, the global edge AI, cloud, network, and security solutions provider, supported Ucom, one of Armenia’s leading telecommunications providers, in safeguarding public live broadcast infrastructure during Armenia’s 2026 parliamentary elections. Ucom…
-
DDoS, Phishing, Datenlecks – 123 Angriffe auf Schleswig-Holsteins IT
First seen on security-insider.de Jump to article: www.security-insider.de/cyberangriffe-schleswig-holstein-123-vorfaelle-seit-2022-a-6e56220d4f052c74f89742668261b619/
-
IoT Botnet C0XMO Adds Competitor-Killing Capability
C0XMO is a new Gafgyt botnet variant exploiting old router flaws, spreading across IoT devices, killing rivals, and enabling large-scale DDoS attacks. In March 2026, FortiGuard Labs discovered a new variant of the Gafgyt botnet, dubbed C0XMO, which is noticeably more capable than its predecessors. The malware spreads through CVE-2021-27137, a stack buffer overflow in…
-
MazeBolt launches AI module to simulate novel DDoS attack vectors
First seen on scworld.com Jump to article: www.scworld.com/brief/mazebolt-launches-ai-module-to-simulate-novel-ddos-attack-vectors
-
[THN Webinar] New AI DDoS Attacks Are Smarter. Learn How to Fight Back
Every single day, hackers are finding new ways to crash websites and steal data.But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks faster, stronger, and much harder to stop.According to recent updates from The Hacker News, bad actors are…
-
New AI DDoS Attacks Are Smarter. Learn How to Fight Back in This Webinar
Every single day, hackers are finding new ways to crash websites and steal data.But right now, something has changed. Hackers are no longer working alone. They are now using powerful Artificial Intelligence (AI) tools to make their attacks faster, stronger, and much harder to stop.According to recent updates from The Hacker News, bad actors are…
-
23-Year-Old Canadian Charged in KimWolf Botnet Operation
DOJ Says KimWolf Powered Massive DDoS-for-Hire Operations. U.S. prosecutors charged a Canadian man accused of operating the KimWolf botnet, alleging the DDoS-for-hire platform compromised nearly two million IoT devices and powered attacks that reached record traffic volumes worldwide. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/23-year-old-canadian-charged-in-kimwolf-botnet-operation-a-31757
-
Canadian man arrested, charged for running KimWolf DDos botnet
In court documents unsealed on Thursday, the Justice Department said Jacob Butler ran KimWolf as a DDoS-for-hire service that infected over a million devices worldwide. First seen on therecord.media Jump to article: therecord.media/canadian-man-arrested-charged-running-kimwolf-botnet
-
Authorities arrest 23-year-old accused of running the Kimwolf botnet
Canadian authorities arrested a 23-year-old Ottawa man accused of running the Kimwolf DDoS botnet. The US is now seeking extradition. US authorities have charged 23-year-old Jacob Butler (aka “Dort”), an Ottawa resident, for allegedly operating the recently disrupted Kimwolf botnet. Authorities arrested the suspect in Canada, he could face up to 10 years in prison…
-
Botnetz: 23-Jähriger Kanadier wegen Botnetz-Betrieb verhaftet
Dem Verdächtigen wird vorgeworfen, das Botnetz Kimwolf als DDoS-for-hire-Service angeboten zu haben. First seen on golem.de Jump to article: www.golem.de/news/botnetz-23-jaehriger-kanadier-wegen-botnetz-betrieb-verhaftet-2605-208979.html
-
Suspected KimWolf botnet admin arrested over DDoShire operation
U.S. and Canadian authorities arrested and charged a Canadian man accused of operating the KimWolf DDoS botnet, a service linked to attacks that infected more than one million … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/22/kimwolf-ddos-botnet-administrator-arrested/
-
Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoSHire Attacks
The U.S. Department of Justice (DoJ) on Thursday announced the arrest of a Canadian man in connection with allegedly operating a distributed denial-of-service (DDoS) botnet known as Kimwolf.In tandem, Jacob Butler (aka Dort), 23, Ottawa, Canada, has been charged with offenses related to the development and operation of the botnet. Kimwolf is assessed to be…
-
AI Botnets Drive Surge in Financial Sector DDoS Attacks
Akamai Links Attack Growth to AI-Enabled Botnets and Hacktivists. Akamai says AI-enabled botnets, geopolitical hacktivism and financially motivated cybercriminals drove a massive rise in DDoS, API and web attacks against global financial services firms in 2025, with banks suffering the majority of incidents. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-botnets-drive-surge-in-financial-sector-ddos-attacks-a-31730
-
AI Botnets Drive Surge in Financial Sector DDoS Attacks
Akamai Links Attack Growth to AI-Enabled Botnets and Hacktivists. Akamai says AI-enabled botnets, geopolitical hacktivism and financially motivated cybercriminals drove a massive rise in DDoS, API and web attacks against global financial services firms in 2025, with banks suffering the majority of incidents. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-botnets-drive-surge-in-financial-sector-ddos-attacks-a-31730
-
Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware
Cybersecurity researchers have discovered four new npm packages containing information-stealing malware, one of which is a clone of the Shai-Hulud worm open-sourced by TeamPCP.The list of identified packages is below -chalk-tempalte (825 Downloads)@deadcode09284814/axios-util (284 Downloads)axois-utils (963 Downloads)color-style-utils (934 Downloads)”One of the packages (chalk-tempalte) First seen on thehackernews.com Jump to article: thehackernews.com/2026/05/four-malicious-npm-packages-deliver.html
-
Cyberkriminalität: Europas KMU im Visier
Das Bundesinnenministerium hat in dieser Woche seinen aktuellen Bericht zur Cyberkriminalität in Deutschland vorgestellt und zeichnet darin ein deutliches Bild der Bedrohungslage. Besonders im Fokus stehen die zunehmenden Angriffe aus Russland seit Beginn des Ukraine-Kriegs, steigende Ransomware-Fälle, DDoS-Attacken sowie die wachsende Rolle von KI im Cybercrime-Kontext. Warum der Bericht vor allem ein strukturelles Problem für……
-
Breach Roundup: Microsoft Edge Turns Passwords Into Targets
Tags: attack, breach, data, data-breach, ddos, government, ivanti, microsoft, north-korea, password, scamAlso, Taiwan Rail Hack, Massive DDoS Attack and Karakurt Jail Sentence. This week, Microsoft Edge exposed passwords, Taiwan police make arrests in high-speed rail hack and a 2.45 billion-request DDoS attack. A Karakurt negotiator jailed, North Korean IT worker scams led to prison terms and France detained a teen over a government data breach. Another…
-
From Android TVs to routers: the xlabs_v1 Mirai-based botnet built for DDoS attacks
A new Mirai”‘based botnet, xlabs_v1, hijacks ADB”‘exposed IoT devices for powerful DDoS attacks, with 21 flooding methods and DDoS”‘for”‘hire use. A new Mirai”‘derived botnet called xlabs_v1 is hijacking internet”‘exposed devices running Android Debug Bridge (ADB) and using them for large”‘scale DDoS attacks. Hunt.io discovered the bot on an unsecured server, it includes 21 flood techniques…
-
The Winter Games effect: When gold meets DDoS
Tags: attack, botnet, cctv, ddos, defense, detection, dns, government, group, infrastructure, international, Internet, iot, jobs, lockbit, network, penetration-testing, ransomware, router, service, strategy, threat, windowsAttack volumes 610x historical levels during the Winter Games period (February 623, 2026)Peak attack count reached more than 2,200 attacks on February 23NoName057(16) dominated public DDoS hacktivist claims with 47, although ransomware groups (Qilin, LockBit 5.0) also claimed success in various attacksTactical shift from pre-Winter Games high-bandwidth attacks (412.89Gbps peak) to Winter Games-period high-throughput attacksGeographic…
-
Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks
Cybersecurity researchers have exposed a new Mirai-derived botnet that self-identifies as xlabs_v1 and targets internet-exposed devices running Android Debug Bridge (ADB) to enlist them in a network capable of carrying out distributed denial-of-service (DDoS) attacks.Hunt.io, which detailed the malware, said it made the discovery after identifying an exposed directory on a Netherlands-hosted First seen on…
-
Massive DDoS Attack Generates 2.45 Billion Requests Using 1.2 Million IP Addresses
A distributed denial-of-service attack targeted a major user-generated content platform, generating an astonishing 2.45 billion malicious requests in just 5 hours. Security provider DataDome successfully intercepted the assault in real time, ensuring legitimate users experienced no disruption. Threat researchers analyzing the incident discovered that the operation relied on 1.2 million unique Internet Protocol addresses. Instead…
-
Massive “Low and Slow” DDoS Attack Hits Platform With 2.45 Billion in 5 Hours
DataDome researchers uncovered a massive low and slow DDoS attack that delivered 2.45 billion requests using 1.2 million IP addresses. First seen on hackread.com Jump to article: hackread.com/low-and-slow-ddos-attack-hits-2-45-billion-5-hours/
-
Ubuntu and Canonical Web Services Hit by DDoS Attack
What happened Canonical, the company behind the Ubuntu Linux distribution, experienced widespread service disruptions across its core web infrastructure on May 1, 2026, following a coordinated DDoS attack. The hacktivist group identifying itself as the Islamic Cyber Resistance in Iraq, known as the 313 Team, claimed responsibility. Canonical acknowledged the outages via its status page…The…
-
Botnet Hijacks ADB-Exposed Android Devices to Target Minecraft Servers
New research has uncovered a Mirai-derived botnet called xlabs_v1 that turns Android devices with exposed Android Debug Bridge (ADB) into a distributed attack platform for knocking Minecraft servers and other game hosts offline. By abusing TCP port 5555 on poorly secured Android-based hardware, the operators are quietly building a rentable DDoS-for-hire service aimed at the gaming ecosystem.…
-
Hackers Use Jenkins Access to Deploy DDoS Botnet Against Gaming Servers
A new campaign shows misconfigured Jenkins servers abused to deploy a DDoS botnet targeting gaming systems, with Valve Corporation infrastructure in focus. First seen on hackread.com Jump to article: hackread.com/hackers-jenkins-ddos-botnet-gaming-servers/
-
Canonical Hit by Sustained DDoS Attack, Disrupting Ubuntu Services Worldwide
A DDoS attack on Canonical has disrupted key Ubuntu services and patching workflows. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/canonical-hit-by-sustained-ddos-attack-disrupting-ubuntu-services-worldwide/
-
Ubuntu services hit by outages after DDoS attack
A group of hacktivists have claimed responsibility for a distributed denial-of-service attack, which has affected several Ubuntu and Canonical websites, and prevented users from updating the Linux-based operating system. First seen on techcrunch.com Jump to article: techcrunch.com/2026/05/01/ubuntu-services-hit-by-outages-after-ddos-attack/
-
Pro-Iran crew turns DDoS into shakedown as Ubuntu.com stays down
313 Team tells Canonical: pay up or the packets keep coming First seen on theregister.com Jump to article: www.theregister.com/2026/05/01/canonical_confirms_ubuntu_infrastructure_under/
-
DDoS Malware Targets Jenkins to Hit Valve Game Servers
A new DDoS botnet that abuses exposed Jenkins servers to launch powerful attacks against Valve Source Engine game infrastructure, including servers hosting titles like Counter”‘Strike and Team Fortress 2. The campaign shows how a single misconfigured CI server can be turned into a multi”‘platform attack node capable of UDP, TCP, and application”‘layer floods against online…

