Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
2026-05-07T07:23:27Z•f4177c84838058b65ced5225b272ec477fe5c1f2603f2dbef6c969e6735450ca
CanisterWormDDoSGandCrabIoT botnetIran-linked actorsMicrosoft Office tokensPatch TuesdayREvilRussia-linked APTSIM-swap/social engineeringScattered SpiderStrykerUNKNWindows SharePoint zero-day','BlueHammer','Chrome zero-day','Ad0anti-DDoS vendor compromisebotnetcredential theftdoxingidentity theftransomwarerouter vulnerabilitiessupply-chain/third-party compromisewiper malwarewire fraudzero-day
What happened
KrebsOnSecurity’s recent feed highlights a wave of disruptive and high-impact activity: a Brazilian anti‑DDoS vendor was allegedly compromised and used to amplify attacks on ISPs; multiple large botnets (Aisuru, Kimwolf, JackSkid, Mossad) that enslaved millions of IoT devices were disrupted by authorities; Russian-linked actors exploited legacy router flaws to mass‑harvest Microsoft Office authentication tokens from over 18,000 networks; an Iranian‑targeting worm (CanisterWorm) is wiping cloud data based on locale settings; an Iran-linked wiper hit medtech firm Stryker; and law enforcement/doj
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- f4177c84838058b65ced5225b272ec477fe5c1f2603f2dbef6c969e6735450ca
- Enrichment time
- 2026-05-07T07:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.