DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
Summary: The Aisuru IoT botnet, drawing most of its firepower from compromised devices on U.S. ISPs including AT&T, Comcast and Verizon, launched a brief attack on October 6 that reached 29.6 terabits per second, following earlier records of 6.35 Tbps in May 2025, 11 Tbps days later, and 22 Tbps by late September. An estimated 300,000 compromised hosts worldwide feed the botnet, which is built on leaked 2016 Mirai code and has been blamed for repeated outages at Minecraft hosting providers, including a 15 Tbps attack on TCPShield on October 8 after which upstream provider OVH dropped TCPShield as a customer.
What's compelling: Netscout's Roland Dobbins notes ISPs are routinely seeing terabit-per-second-plus outbound attacks from their own networks, and Proxypipe's Robert Coelho puts the cost of merely having the capacity to absorb these attacks at a million dollars a month.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026