Malware
malware:kimwolf
Also: Kimwolf botnet
Botnet described as controlling approximately two million devices and launching very large DDoS attacks.
Botnet described as controlling approximately two million devices and launching very large DDoS attacks.
“It was the Kimwolf botnet, and it was launching attacks at 31 terabytes per second.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | OPERATED_BY | Dort | Explicit | 172 |
| outgoing | USES | DDoS | Explicit | 172 |
| incoming | ASSOCIATED_WITH | SuperBox | Explicit | 172 |
Jack states that Dort made the Kimwolf botnet and controls the infected SuperBoxes; this is presented as the episode’s account.
Explicit Confidence 97% · Jack Rhysider EP 172 Details
“this guy, Dort, who’s the one who made the Kimwolf botnet, controls the SuperBoxes.”
SuperBox ASSOCIATED_WITH Kimwolf
D3ada55 confirms that SuperBoxes were part of the Kimwolf botnet.
Explicit Confidence 99% · D3ada55 EP 172 Details
“They were confirmed as part of that botnet.”
The Kimwolf botnet is described as launching large-scale DDoS attacks and operating as a DDoS-for-hire service.
Explicit Confidence 99% · Jack Rhysider EP 172 Details
“the Kimwolf botnet is a DDOS-as-a-service business.”