Kimwolf Botnet Swamps Anonymity Network I2P
Summary: The Kimwolf IoT botnet disrupted the I2P anonymity network for about a week after its operators tried to join 700,000 infected bots as nodes, with I2P users reporting outages starting February 3. I2P founder Lance James said the network normally runs 15,000 to 20,000 devices daily and was left operating at about half capacity, while researcher Benjamin Brundage said the botmasters were experimenting with I2P and Tor as backup command and control to survive takedown attempts.
Key Takeaway: A botnet that already infected millions of IoT devices tried to absorb a volunteer-run anonymity network many times its size as fallback infrastructure, and Brundage said a recent staffing misstep cut Kimwolf's own numbers by more than 600,000 infected systems - a reminder that the resilience of your takedown strategy depends on the adversary's competence, not yours.
Read the original at Krebs on Security ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026