How AI Assistants are Moving the Security Goalposts

2026-03-09T19:23:34Zaba740141eef6208a409f08a69078a0c1cba15cc7bf1015b3541f154c0c332e9
ai-assistantsaisurubadbox 2.0botnetcredential-harvestingddosdoxingi2piotkimwolfmfa-bypassmicrosoft-patch-tuesdayphishingphishing-as-a-servicescattered-lapsus-shinyhunterssecurity-shiftstarkillerswattingthreat-actor-dortvulnerability-managementzero-day

What happened

This KrebsOnSecurity collection highlights multiple active, high-impact threats: Kimwolf — a massive IoT botnet (reported >2M devices) used for large-scale DDoS, abuse relaying, scanning/local-network spread, and disruption of the I2P anonymity network — whose operators (handle “Dort”) have engaged in targeted harassment, doxing and swatting. Related reporting links Kimwolf operators to compromises of other botnets (Badbox 2.0) and shows Kimwolf presence in corporate and government networks. A new stealthy phishing-as-a-service called “Starkiller” proxies real vendor login pages and relays MFA

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
aba740141eef6208a409f08a69078a0c1cba15cc7bf1015b3541f154c0c332e9
Enrichment time
2026-03-09T19:23:34Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · How AI Assistants are Moving the Security Goalposts · Baitaphish