U.S. Disrupts Major Botnets Responsible for Record-Breaking Cyberattacks

On March 19, 2026, the U.S. Department of Justice announced a significant operation that dismantled four major botnets—Aisuru, KimWolf, JackSkid, and Mossad—responsible for infecting over 3 million devices worldwide, including hundreds of thousands in the United States. This coordinated effort involved collaboration with law enforcement agencies from Germany and Canada and targeted the command-and-control infrastructure used by these botnets to launch distributed denial-of-service (DDoS) attacks.

UsNews and World ReportKUBD - KetchikanWired MagazineUS takes down ‘cybercrime-as-a-service’ botnets that hijacked over 3 million IoT devices globally

The botnets primarily comprised Internet of Things (IoT) devices such as digital video recorders, webcams, and Wi-Fi routers. The Aisuru and KimWolf botnets, in particular, were noted for their scale and impact, with Aisuru alone being linked to record-breaking DDoS attacks that reached up to 30 terabits per second. These botnets operated on a "cybercrime-as-a-service" model, allowing other criminals to rent access to the compromised devices for launching their own attacks.

Wired MagazineUS takes down ‘cybercrime-as-a-service’ botnets that hijacked over 3 million IoT devices globallyKUBD - KetchikanUsNews and World Report

According to the Justice Department, the botnet operators executed hundreds of thousands of DDoS attacks against various targets, including the Department of Defense Information Network. The operation aimed to disrupt the communications tied to these botnets, prevent further infections, and reduce their capacity for future attacks.

KUBD - KetchikanUS takes down ‘cybercrime-as-a-service’ botnets that hijacked over 3 million IoT devices globallyUsNews and World ReportWired Magazine

The operation's impact was significant, as it not only disrupted the botnets but also highlighted the vulnerabilities of IoT devices, which are often less secure than traditional computing devices. Victims of these attacks reported losses and cleanup costs amounting to tens of thousands of dollars. The Justice Department's statement indicated that the botnets had issued over 200,000 attack commands, with Aisuru being the most active.

US takes down ‘cybercrime-as-a-service’ botnets that hijacked over 3 million IoT devices globallyKUBD - KetchikanWired MagazineUsNews and World Report

U.S. Attorney Michael J. Heyman emphasized the commitment of the United States to safeguard critical internet infrastructure and combat cybercriminals. He stated, "The United States is steadfast in our commitment to safeguarding critical internet infrastructure and fighting the cybercriminals who jeopardize its security, wherever they might live." Kenneth DeChellis, a special agent in charge at the Department of Defense Investigative Service, noted, "Today’s disruption of four powerful botnets highlights our commitment to eliminate emerging cyber threats to the Department of Defense and its warfighters."

UsNews and World Report

While the operation was largely praised, some experts have raised concerns about the ongoing threat posed by botnets and the need for more robust security measures for IoT devices. Cybersecurity journalist Brian Krebs, who has been targeted by these botnets, highlighted the persistent nature of such cyber threats and the challenges in fully eradicating them.

US takes down ‘cybercrime-as-a-service’ botnets that hijacked over 3 million IoT devices globally

Following this operation, ongoing investigations are expected to continue as authorities pursue individuals linked to the botnets. The collaboration between U.S., Canadian, and German law enforcement agencies may lead to further actions against cybercriminals operating in this space.

US takes down ‘cybercrime-as-a-service’ botnets that hijacked over 3 million IoT devices globallyKUBD - KetchikanUsNews and World ReportWired Magazine

• “Today’s disruption of four powerful botnets highlights our commitment to eliminate emerging cyber threats to the Department of Defense and its warfighters,” — Kenneth DeChellis, Special Agent, Department of Defense Investigative Service

UsNews and World Report

• “The United States is steadfast in our commitment to safeguarding critical internet infrastructure and fighting the cybercriminals who jeopardize its security, wherever they might live,” — Michael J. Heyman, U.S. Attorney

Wired Magazine