Over 500 Aisuru, Kimwolf botnet C2 servers severed

Cybernews reports that the Aisuru and Kimwolf botnets, which are behind the record-shattering distributed denial-of-service attacks, had their activity disrupted after Lumen's Black Lotus Labs researchers null-routed 550 command-and-control nodes used in their operations within four months.

"As the botnet grew to a critical size, Lumen took action by blocking traffic to and from known C2 nodes across our global network," said researchers in a report on LinkedIn. While botnet operators have been quick to migrate to another C2 and alter their architecture in response to researchers' actions, such a crackdown was noted to have caused "some distress" among operators, who launched DDoS attacks with profanity-laden payloads against researchers.

Such a development comes after Kimwolf was reported by Synthient's Research Team to have compromised more than two million devices worldwide. "Kimwolf's scanning of proxy networks was at an unprecedented scale, with them holding the number one position many times for the most-targeted domain," said the Synthient report.