US and friends disrupt world's largest DDoS botnet responsible for record 31.4 Tbps global attacks
A network of over 3 million devices has been disrupted
· TechRadarNews By Benedict Collins published 20 March 2026
Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter
Get the TechRadar Newsletter
Sign up for breaking news, reviews, opinion, top tech deals, and more.
Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors
By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
You are now subscribed
Your newsletter sign-up was successful
An account already exists for this email address, please log in. Subscribe to our newsletter
- An international operating has disrupted four global botnets
- The botnets operated over 3 million devices for DDoS attacks
- The US, Canada, and Germany worked together to disrupt infrastructure and individuals
A global botnet responsible for a record breaking 31.4 Tbps DDoS attack has been disrupted by an international operation.
Law enforcement from the United States, Germany, and Canada targeted Command and Control (C2) infrastructure, virtual servers, and internet domains used to infect Internet of Things (IoT) devices.
The US Justice Department said the infrastructure was being used by Aisuru, KimWolf, JackSkid, and Mossad, and contained more than three million infected devices across the globe.
Article continues below
Global botnet disruption
The Justice Department explained that the operation was conducted simultaneously, with partners in Canada and Germany targeting the individuals responsible for operating the botnets.
“Some of these attacks measured approximately 30 Terabits per second, which were record-breaking attacks,” the Justice Department added.
The Aisuru botnet has been used in numerous record breaking DDoS attacks, including a 15.72 Tbps attack against Microsoft Azure. The KimWolf botnet operated over 1.8 million Android devices, while the Justice Department said the lesser-known JackSkid group has “launched more than 90,000 DDoS attack commands.” The Mossad botnet launched over 1,000 attack commands
DDoS botnets usually consist of internet connected ‘smart’ devices such as digital video recorders, web cameras, or Wi-Fi routers - but almost any internet connected device can be used as part of a botnet.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Contact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsors