In a coordinated international effort, law enforcement agencies from the United States, Germany, and Canada have successfully disrupted the infrastructure of four major botnets responsible for infecting more than three million devices worldwide. The operation marks a significant step in the ongoing fight against large-scale cybercrime.
According to a statement released by the U.S. Department of Justice on Thursday, the botnets identified as Aisuru, KimWolf, JackSkid, and Mossad were widely used to carry out distributed denial-of-service (DDoS) attacks. These attacks overwhelmed targeted systems with massive traffic, temporarily disabling services. Among the affected targets were systems linked to the U.S. Department of Defense.
German authorities confirmed that two individuals suspected of operating the botnets have been identified. Law enforcement officials conducted searches at their residences in both Germany and Canada, seizing substantial evidence. This included multiple data storage devices and cryptocurrencies valued at tens of thousands of dollars.
Investigators revealed that a large proportion of compromised devices belonged to the Internet of Things (IoT) category such as webcams, digital video recorders, and Wi-Fi routers. These devices are often vulnerable due to outdated software or weak security settings, making them easy targets for cybercriminals without the owners’ knowledge.
Authorities also highlighted that the operators executed hundreds of thousands of DDoS attacks globally. In some instances, victims were extorted for payment in exchange for halting the attacks. Additionally, the KimWolf botnet was reportedly used as a residential proxy service, allowing third parties to route their online activities through infected devices, effectively masking their identities for a fee.
German police emphasized that devices lacking proper security updates or strong passwords remain particularly susceptible to such threats. They urged users to take preventive measures to protect their devices.
Kenneth DeChellis, Special Agent in Charge at the Department of Defense Investigative Service, stated that the operation underscores a strong commitment to countering evolving cyber threats and safeguarding critical infrastructure.
The success of the operation was made possible through collaboration with nearly two dozen major technology companies, including Amazon Web Services, Google, PayPal, and Nokia. The initiative was also supported by Europol’s “PowerOff” program, which has been targeting DDoS-related cybercrime since 2017.
Officials say the takedown sends a clear message to cybercriminals that international cooperation remains a powerful tool in combating digital threats.
