Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
2026-05-04T19:23:36Z•4269c1c5eea8944a4100cf878f2d474d6b206cf29b86b00135fdd6d929132a1c
APTAisuruBrazilCanisterWormDDoSGandCrabISP attacksIoT botnetIran-backed actorsIran-targetingJackSkidKimwolfMicrosoft Office token theftMossadREvilRussia-linkedStrykerUNKN (Daniil Shchukin) doxxed,anti-DDoSbotnetdisruptionlaw enforcementransomwarerouter exploitationwiper
What happened
Multiple high-impact cybersecurity events: a Brazilian anti-DDoS firm was found to have enabled a botnet that launched massive DDoS attacks against ISPs (firm claims breach/possible competitor sabotage); Russian-linked actors exploited old router flaws to mass-harvest Microsoft Office authentication tokens from 18,000+ networks; U.S. and international authorities disrupted four large IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad). Other notable incidents include a Scattered Spider member ("Tylerb") pleading guilty for SMS-phishing-based intrusions and theft, Germany identifying the operator (
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 4269c1c5eea8944a4100cf878f2d474d6b206cf29b86b00135fdd6d929132a1c
- Enrichment time
- 2026-05-04T19:23:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.