006

The report describes AISURU/Kimwolf, a large Android-device botnet that launched record-setting hyper‑volumetric DDoS attacks in late 2025 (peaking at 31.4 Tbps and spikes of billions of packets per second), its use of trojanized Android/Windows binaries and residential proxy services (IPIDEA) to enroll over 2 million devices, the sectors and countries most impacted, and mitigation/disruption actions taken by Cloudflare and Google.