How AI Assistants are Moving the Security Goalposts
2026-03-10T07:23:29Z•edea70fc2408c0d3e01b34142a9906b8509f9b63c0b7d62e7115bb91551592ae
AI assistantsBadbox 2.0DDoSI2PIoTKimwolfMFA bypassMicrosoftPatch TuesdayScattered Lapsus ShinyHuntersStarkillerautonomous agentsbotnetcredential theftdoxinginsider-threatphishing-as-a-serviceswattingzero-day
What happened
Multiple KrebsOnSecurity reports describe converging, high-impact threats in early 2026: the Kimwolf IoT botnet (reported >2 million infected devices) is conducting massive DDoS, relaying abusive traffic, abusing anonymity networks (I2P) to evade takedowns, and has been linked to compromises of other botnets (Badbox 2.0); the Kimwolf operator (“Dort”) has mounted harassment, doxing and swatting against researchers. A new phishing-as-a-service named “Starkiller” proxies real login pages and relays credentials and MFA codes to the legitimate sites, enabling reliable account takeover while evadng
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- edea70fc2408c0d3e01b34142a9906b8509f9b63c0b7d62e7115bb91551592ae
- Enrichment time
- 2026-03-10T07:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.