How AI Assistants are Moving the Security Goalposts
2026-03-09T19:23:34Z•aba740141eef6208a409f08a69078a0c1cba15cc7bf1015b3541f154c0c332e9
ai-assistantsaisurubadbox 2.0botnetcredential-harvestingddosdoxingi2piotkimwolfmfa-bypassmicrosoft-patch-tuesdayphishingphishing-as-a-servicescattered-lapsus-shinyhunterssecurity-shiftstarkillerswattingthreat-actor-dortvulnerability-managementzero-day
What happened
This KrebsOnSecurity collection highlights multiple active, high-impact threats: Kimwolf — a massive IoT botnet (reported >2M devices) used for large-scale DDoS, abuse relaying, scanning/local-network spread, and disruption of the I2P anonymity network — whose operators (handle “Dort”) have engaged in targeted harassment, doxing and swatting. Related reporting links Kimwolf operators to compromises of other botnets (Badbox 2.0) and shows Kimwolf presence in corporate and government networks. A new stealthy phishing-as-a-service called “Starkiller” proxies real vendor login pages and relays MFA
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- aba740141eef6208a409f08a69078a0c1cba15cc7bf1015b3541f154c0c332e9
- Enrichment time
- 2026-03-09T19:23:34Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.