Prosecutor release

# Authorities disrupt world's largest IoT DDoS botnets responsible for record breaking attacks targeting victims worldwide

USAO Alaska / US DOJ, March 19, 2026. Establishes the multi-country disruption of the four related IoT DDoS botnet families..

**Source type:** Prosecutor release

**Published:** March 19, 2026

**Research grade:** P1

**Used in entries:** 16

## Bibliographic record

**Publisher:** USAO Alaska / US DOJ

**Published:** March 19, 2026

**Source type:** Prosecutor release

**Research grade:** Source grade P1

**Language:** English

**Official record:** Official publication

**Address:** [https://www.justice.gov/usao-ak/pr/authorities-disrupt-worlds-largest-iot-ddos-botnets-responsible-record-breaking-attacks](https://www.justice.gov/usao-ak/pr/authorities-disrupt-worlds-largest-iot-ddos-botnets-responsible-record-breaking-attacks)

**What it supports:** Establishes the multi-country disruption of the four related IoT DDoS botnet families.

**Dataset id:** src\_doj\_aisuru\_2026

How this source is used

Cited 16 times across 3 record types.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Takedown records

1 citation

Cited on the takedown record itself.

-
[Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Malware and botnets, March 2026

Primary source

### Organization roles

12 citations

Cited for an organization's recorded role in a takedown.

-
[United States Attorney's Office for the District of Alaska](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Operational lead, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Federal Bureau of Investigation](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Supporting, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Bundeskriminalamt](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Supporting, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Royal Canadian Mounted Police](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Supporting, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Politie (Netherlands National Police)](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Supporting, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Defense Criminal Investigative Service](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Lead investigator, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Federal Bureau of Investigation](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Investigator, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Bundeskriminalamt](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Foreign partner, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Royal Canadian Mounted Police](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Foreign partner, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Ontario Provincial Police](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Foreign partner, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Sûreté du Québec](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Foreign partner, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[European Union Agency for Law Enforcement Cooperation](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

International support, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source

### Infrastructure

3 citations

Cited for infrastructure recorded as acted on.

-
[Command and control server](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Command and control server seized, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Domain](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Domain seized, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source
-
[Server](https://takedownindex.org/takedowns/aisuru-kimwolf-jackskid-mossad-iot-ddos-botnet-disruption)

Server seized, Aisuru/KimWolf/JackSkid/Mossad IoT DDoS botnet disruption

Primary source

[All sources](https://takedownindex.org/sources)
