Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
2026-05-01T13:23:30Z•5118dca9b59899fc0b4ea1472c6c3731c5c6f9498c89c953bac3af222f72fff8
APT (Russia-linked)Adobe ReaderChromeDDoSIoT botnetIran-linkedMicrosoftSharePointWindows Defender (BlueHammer)anti-DDoS abuseauthentication tokensbotnetcredential theftlaw enforcement takedownlegal_plearansomwarerouter vulnerabilitiesscattered_spidersocial_engineeringsupply_chain/cloudthreat_actor_attributionwiperzero-day
What happened
Multiple high-impact cyber incidents and developments were reported across April 2026: a Brazilian anti-DDoS firm was implicated in enabling a botnet used to launch massive DDoS attacks against ISPs; Russian-linked actors exploited known router vulnerabilities to mass-harvest Microsoft Office authentication tokens from >18,000 networks; several destructive wiper and ransomware campaigns (including CanisterWorm and a claimed Iran-backed wiper against Stryker) were active; U.S. and allied authorities disrupted four large IoT botnets (Aisuru, Kimwolf, JackSkid, Mossad). Microsoft and other major,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 5118dca9b59899fc0b4ea1472c6c3731c5c6f9498c89c953bac3af222f72fff8
- Enrichment time
- 2026-05-01T13:23:30Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.